AntiSpoof issues

classic Classic list List threaded Threaded
24 messages Options
12
Reply | Threaded
Open this post in threaded view
|

Re: AntiSpoof issues

Gregory Maxwell
On 11/15/06, Timwi <[hidden email]> wrote:

> > This requires that the user supplies an e-mail address - not currently a
> > requirement, so far as I know...
>
> Do you have any better ideas?
>
> Note that it is still perfectly possible to register without an e-mail
> address if you don't trigger the anti-spoof system, which I would hope
> would be the vast majority of cases. If someone is determined to have a
> certain username because it's their Internet handle (and not because
> they're trying to impersonate someone), they normally wouldn't mind
> supplying at least a temporary e-mail address.

The whole point of my 'real time challenge' was to avoid email. Email
is store and forward: i.e. not real-time.  :)

I was hoping for something along the lines of sticking them on an auto
refreshing page (or some kinda ajax spinner) while a notice was
directed to IRC.

I believe we have the human resources on at least some of our projects
to do some amount of 'real time' work.. Where the real time work might
be, things like:

# Account approval
# Edit approval   (i.e. detect penis penis penis and hold their edit
until someone approves it, or perhaps a new sort of protection...)
# Upload approval  (users first upload can be inspected while they wait)

A successful system would integrate well with mediawiki (I consider
this the hard part), be easy for our (impatient) users, and be able to
degrade gracefully. (Track the backlog and if it grows too much, start
directing people to the old non-real time methods rather than leaving
people waiting for ever).
_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
Reply | Threaded
Open this post in threaded view
|

Re: AntiSpoof issues

Alphax (Wikipedia email)
Gregory Maxwell wrote:
<snip>
> # Edit approval   (i.e. detect penis penis penis and hold their edit
> until someone approves it, or perhaps a new sort of protection...)

You seem to have an unhealthy obsession with that...

> # Upload approval  (users first upload can be inspected while they wait)
>

Could be useful on Commons. Also useful would be a "mark this image as
being sane" function, with a queue, that would prevent it from being
displayed to non-sysops until reviewed. End of image vandalism forever!
End of horribly blatant copyvios too...

Of course, the hard part is getting it written and integrated. Hrm.

--
Alphax - http://en.wikipedia.org/wiki/User:Alphax
Contributor to Wikipedia, the Free Encyclopedia
"We make the internet not suck" - Jimbo Wales
Public key: http://en.wikipedia.org/wiki/User:Alphax/OpenPGP


_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l

signature.asc (581 bytes) Download Attachment
Reply | Threaded
Open this post in threaded view
|

Re: AntiSpoof issues

David Gerard-2
On 16/11/06, Alphax (Wikipedia email) <[hidden email]> wrote:

> Could be useful on Commons. Also useful would be a "mark this image as
> being sane" function, with a queue, that would prevent it from being
> displayed to non-sysops until reviewed. End of image vandalism forever!
> End of horribly blatant copyvios too...


It's a good thing Commons has lots of sysops spare!


- d.
_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
Reply | Threaded
Open this post in threaded view
|

OpenID (was Re: AntiSpoof issues)

evanprodromou
In reply to this post by Johannes Ernst-2
On Wed, 2006-15-11 at 14:00 -0800, Johannes Ernst wrote:
> Is this a good time to mention that there's a very nice OpenID  
> extension to MediaWiki?

It's _always_ a good time to compliment my code. Thanks!

If you need a better explanatory URL, the main homepage is here:

        http://www.mediawiki.org/wiki/OpenID_Extension

> See in action here:
>      http://openid.net/wiki/

It's also in production on Wikitravel.

        http://wikitravel.org/en/Wikitravel:Single_sign-on_help

I don't think that OpenID is a realistic fix for username spoofing
(since there are at least half-a-dozen free OpenID identity services),
but it's always nice to mention.

Brion has said a few times that OpenID will be rolled out on Wikimedia
sites once the Single User Login is in place.

-Evan

--
Evan Prodromou <[hidden email]>
_______________________________________________
Wikitech-l mailing list
[hidden email]
http://mail.wikipedia.org/mailman/listinfo/wikitech-l
12