Page MenuHomePhabricator

multiple edits in a high traffic article with malicious vandals gets overridden
Closed, DeclinedPublic

Description

Author: eudaimonic.leftist

Description:
I experienced this while trying to revert vandalism in
http://en.wikipedia.org/wiki/Tookie - a user had managed to suppress all my
attempts at reverting by flooding the page with fake reversion edits (with
misleading edit summaries, I must say). The first time when I saved the last
good version, it brought me back to the original page with vandalism on it - I
checked the history and it appears my edit was not even noted!

This susceptibility to intentional flooding apparently doesn't even allow an
"edit conflict" message to occur. Somehow, many user's attempts at reverting was
repressed continously. Even when admins had protected the page, apparently
having thought they had reverted beforehand - they could only successfully
revert ''after'' they had protected the page.

A second type of bug seemed to occur when I attempted to click on a revision to
select to revert to. Every time I clicked on a good revision (as it was
associated with a legitimate user), I ended up getting a version of the page
with the malicious edits on it. There clearly is a disturbing susceptibility
somewhere, despite its rarity.


Version: unspecified
Severity: normal
Platform: PC

Details

Reference
bz4266

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 8:59 PM
bzimport set Reference to bz4266.
bzimport added a subscriber: Unknown Object (MLST).

Can you please provide some URLs to those versions that you saw incorrectly?

eudaimonic.leftist wrote:

There's an entire demonstration of this at
http://en.wikipedia.org/w/index.php?title=Tookie&action=history - it's not a
very reproducible bug as we can only test it if we decide to flood edit or
something, but every time I tried to revert to
[http://en.wikipedia.org/w/index.php?title=Tookie&oldid=31156092 this revision],
I got kicked back to a vandalised version instead, without any sign of an edit
conflict.

Cannot see a problem in the history, so I can't reproduce anything.