In T325658#8711928, @JJMC89 wrote:

In T325658#8711919, @Niharika wrote:

To answer your question about expiration - We need these logs to expire because they contain the IP addresses. We could scrub the IPs and keep the log entry but will that be helpful on its own?

The CU logs contain IP addresses and they do not expire. Why should this log be any different?

In T325658#8485435, @JJMC89 wrote:

Why do the log entries need to expire? No other logs have an expiration.
Also, why is PII being logged? I see no reason that that the revealed IP needs to be in the log. Using the current CU log format should be sufficient.

Thanks for the patch @Umherirrender!

I'm not sure I follow. How would we inform users about this impending change if they have not provided us with an email address? Can we go the MassMessage route? I am especially concerned about any accounts that have been active in the last year or so. I would also like to give them heads up in advance (at least 1 month) that this change is happening and tell them what their new username will be. If we cab create a list of the users who were active in the last year and have to be renamed, I can work with CRS to inform them using MassMessage.

In T325768#8705514, @Jdlrobson wrote:

@Tchanders so would this also apply to the top right of the page UI too? (just confirming)

In T324602#8690912, @Prtksxna wrote:

• What should happen if the Admin does not have access to view temp account IP addresses - e.g. because they haven't enabled the preference - should we prompt them, or should we show nothing at all?

A quick question here - is this the preference that you were telling me about over our most recent video call? Is this effectively the NDA preference, or something else?

I think it is a good place to remind Admins that they could have access to IP data, @Niharika any reasons not to?

Hi! I want to clarify that the following are code functions and not database fields:

• User::isRegistered() will return true for all registered accounts, including temporary accounts.
• User::isAnon() will return false for such temporary accounts.
• User::isTemp() will return true exclusively for temporary accounts.
• User::isNamed() will return true exclusively for registered accounts that are not temporary accounts.

In T330509#8691929, @RHo wrote:

In T330509#8686997, @kostajh wrote:

Should we close this as a duplicate of T58828, in order to have a single place for discussion? (And maybe T58828 should be renamed to reference temporary users specifically.)

OTOH, if we are saying we want to do this for Temp users only as different from IP editors, should we keep this ticket open and leave T58828 alone? Since IP editors will continue to exist for many wikis whilst IP masking is being rolled out.

Thanks @Dreamy_Jazz. @dom_walden would T331008 cover it?

I think there's a few different scenarios we need to think about here. Let me try and clarify.

In T300265#8666980, @tstarling wrote:

I think I can adapt SecurePoll's sendMail.php for this purpose.

In T326415#8605305, @Tchanders wrote:

Special:Contributions page says "No changes were found" so there's no problem with IPInfo specifically. If there was a list of changes on the page, but we had an IPInfo error saying that no changes had been found, that would indicate a problem.

If I've understood correctly what you've done, then the reason no contributions are shown here is because Special:Contributions for an IP address won't show which contributions were made by temporary accounts who used that IP address. That's because it would leak the IP addresses of those users to everyone (since everyone can see Special:Contributions.) Once IP Masking is enabled, Special:Contributions for an IP address will only show historical edits made by anon users from before IPs were masked. @Niharika should we add some messaging on these pages to explain this?

Late to the party - I think it would be good to implement notifications for temp users as this would facilitate better communications with them. Communicating with unregistered editors has been a long-standing community pain point, having come up in various discussions over and over.
For the MVP, maybe we don't worry about giving them the ability to disable notifications? I don't have data about how frequently people disable notifications. That can be a consideration while making this decision.

@valerio.bozzolan Hi! Sorry for my late reply. I agree with @Vituzzu and @SCP-2000 that this needs to go through a community approval process before it can be implemented. I'm sorry, I know that isn't a very satisfying answer. I have studied the problem of IP blocks and understand the extent of the impact. However this is a community decision ultimately.

In T328311#8574691, @Ladsgroup wrote:

In T328311#8573392, @dom_walden wrote:

It might be because those temporary users are not in the actor or user tables.

Assuming that we always assign temporary user names sequentially, there would appear to be lots of temporary users accounts which are not recorded in the database on beta dewiki:

That is intentional. In order to avoid race conditions and similar issues, a user id is picked from a sharding system plus some randomness.

Thanks @Umherirrender!

And from the client side, just fyi, the apps do allow users to accumulate reading lists locally even if logged out. It's only when logged into an account, we sync the reading lists to the server, using the ReadingLists extension. It should be very simple for the clients to maintain the same behavior for a temporary account (i.e. don't sync reading lists) as for a logged-out user.

Our guidance for IP Masking impacted products at the moment is to keep their experience consistent with current logged-out editor experience to avoid introducing drastic changes without prior community input.
With that in mind, I think it would be good to disable reading lists for temporary accounts and remove references to them in the UI.

@cscott We are not familiar with those codebases either. Do you know who might be able to help?

In T325768#8672804, @Tchanders wrote:

Thanks @RHo.

@Niharika What do you think should happen in those other places? A related question that has come up in code review - do we want this background to be added on potentially any page where a user link might be shown, or can we limit it to certain pages we know about, e.g. pages that have paginated lists of results?

See @Jdlrobson's comment: https://gerrit.wikimedia.org/r/c/mediawiki/core/+/884895/

@Niharika A related question would be whether we want the background on pages like Special: Permalink (T331008), page information (T331017) and credits (T331021)

In T326396#8599004, @GMikesell-WMF wrote:

Possible Issue: I'm not sure if this is by design but as you see I have 2 different IP addresses for the same temp user that is pointed by the arrows. In the main header highlighted it showed one of the IP addresses I used and "2x". Is it supposed to show the other IP address used, which is "103.130.145.255" along with "2001:240:0:0:0:0:0:0"?

We decided to do this for now, but it should be reviewed by @Niharika - what would you like to do here? If something different, we should file that as a new task.

Did you want me to create a separate ticket for this @Niharika or will this be as designed for now? Otherwise, I will move this to Done since the other issues have tickets already. Thanks!

Thanks for filing ALL of these tasks, @Dreamy_Jazz. I just realized you filed so many. Thank you. Stay awesome.

Thanks for filing this one, @Dreamy_Jazz! Will add it to our next sprint.

@Dreamy_Jazz hi! If the problem is with the label reading "new" can we just take it out and say "Try out Special:Investigate" or something like it? I don't want to diminish its prominence. It is a relatively newer tool than Checkuser so I would argue a link to Special:Investigate should be more prominent on Special:Checkuser than the other way around. Is that okay?

I agree. Let's push this change through as is. We can follow-up with T319081.

@RHo if we pursue this task should we add a gray background to the IP address (aka future temp accounts) for consistency?

I think there's an outstanding question from @RHo in this task.

In addition, I wanted to check whether it will update the background colour everywhere with temp username, or only in pages where it is a link? See for example the page to create a Userpage for an IP editor at the moment, there are three differently styled IP addresses here

Vector 2022

Minerva