MediaWiki - User contributions [en]

MediaWiki talk:Community Portal/Vandalism

2011-08-30T20:55:53Z

Lolclerk5: /* Proxies */ new section

== Our new resident vandal..... ==

Well, it seems that we might have a new resident vandal on our hands.

I suggest we block this guy, ban his IP if he continues, play whack-a-mole with his IPs if he's on a dynamic-IP, and if all else fails, temporarily block all account creation. --[[User:-Blackout-|-Blackout-]] 14:53, 24 August 2009 (EDT)
:He is likely still Assaulthead.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 14:55, 24 August 2009 (EDT)
::Yeah, he does have Assaulthead's rabid obsession with reproduction, although this time he no longer appears to be repressing homosexual urges. I swear he'd be a perv if I thought he was old enough to understand half of this. Still, this is starting to get out of hand. Our policy of "deny recognition" is starting to become "ignoring a problem". There was talk about contacting AT&T or something along those lines to prevent him accessing our site anymore. What happened with that? -- [[User:SFH|SFH]] 14:59, 24 August 2009 (EDT)
:::We need McFly and Scout to pull out the logs, except we haven't heard from either of them in a long while. --[[User:Lonegamer78|Lonegamer78]] 15:05, 24 August 2009 (EDT)
::::Well, he has to run out of proxy servers sometime.....
::::At least, we can limit his choice of user and article names via the title blacklist. --[[User:-Blackout-|-Blackout-]] 15:19, 24 August 2009 (EDT)
::::: *takes another quick look at the RC* I really need to create the remaining SG pages tomorrow. That way, he'll stop messing around with them. --[[User:-Blackout-|-Blackout-]] 15:24, 24 August 2009 (EDT)
::::::I have to admit I keep putting off making the Ark and Nemesis articles because of all the fiction-writeups they'll need... *needs to stop procrastinating and get back into things* --[[User:Jeysie|Jeysie]] 20:10, 24 August 2009 (EDT)

::::Er, on that score, regular backup are still being done, right? Anyone? --[[User:Abates|abates]] 20:46, 24 August 2009 (EDT)
:::::Look who's back.
:::::And guess what: he's decided to confirm our suspicions and reveal that he's Assaulthead. The title of one of the articles he made is a giveaway.
:::::But seriously, can't we just get this guy off our backs for a while by blocking him, putting his user and article names on the title blacklist and temporarily disabling account creation? At least it'll buy us some time while we try and wake up McFly and Scout. --[[User:-Blackout-|-Blackout-]] 12:26, 25 August 2009 (EDT)
::::::PLEASE, SOMEONE KILL THIS GUY ALREADY.
:::::: THANK YOU. --[[User:-Blackout-|-Blackout-]] 12:17, 26 August 2009 (EDT)
:::::::Alright, I need to get this off my chest.
:::::::This guy is seriously disturbed. --[[User:-Blackout-|-Blackout-]] 14:33, 28 August 2009 (EDT)
:We have logs going back two weeks. Anyone want an 80MB gzipped apache log? Any tracking that I've done in the past showed that he was coming from multiple IPs as he's blocked, so the sad fact is, he's NOT running out of proxies. I'd almost propose that we start looking into blocking edits from proxied users. I understand the negative implications, but this isn't exactly a hotbed of political commentary. All that said, the records I have for edits made to articles that were obviously kicked off by him have IPs coming from blocks owned by Bank of America, Best Buy, Level 3 Communications, Verizon, Bell Canada, BellSouth, and AT&T. Some of those might be editors cleaning up the mess from home, some of them might be people catching the issue from work, I don't know. We *could* attempt a banhammer of epic proportions, but I suspect that we're going to take out a lot of innocent bystanders. --[[User:McFly|McFly]] 11:08, 2 September 2009 (EDT)
::As many have suggested, repeatedly, have we considered title/username blacklist? If only to keep the recent changes page a bit less... obscene?--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 11:28, 2 September 2009 (EDT)
:::This. Takes away all his fun. As for blocking proxies.... how common are legitimate anons using proxies? We need to have a grasp on that before we take that step. -- [[User:Repowers|Repowers]] 11:37, 2 September 2009 (EDT)

Just brainstorming ... I don't think my ideas are a good solution exactly, but maybe they'll spark something.
* 1: A waiting period for new accounts - a big turn-off for new users.
* 2: A way to flag certain keywords so that users employing them have their edits shunted into some sort of moderator-approval required place. Pornography, vagina, asshole, etc ... I suspect he'll have less fun if he can't use his naughty words. (Feasibility?)
* 3: A credit-card required for new accounts. Violations result in a fine. (Only kept for, say, a week. Has serious data-security and storage implications and opens us up to potential liability. Also a big turn off)
* 4: Some combination of 1 and 3, with a credit-card as a bypass for the waiting period.
* 5: Some combination of the above and proxy-detection.
--[[User:Jimsorenson|Jimsorenson]] 11:28, 2 September 2009 (EDT)
::I think the credit card ideas (3 and 4) are an absolute-no-no. Restricting account creation would only be worth doing if anonymous editing was disabled, which there's been heavy reluctance to do in the past. Otherwise flagging keywords = yes; restricting ''page creation'' to autoconfirmed users = yes; proxy blocking = maybe, if other measures fail. - [[User:SanityOrMadness|SanityOrMadness]] 16:33, 2 September 2009 (EDT)

:''flag certain keywords''
:That sounds like the simplest solution, to my admittedly layman ears. Make it impossible to create an account or a new page that includes "Detour" or any of the usual dirty words. --[[User:Thylacine 2000|Thylacine 2000]] 12:05, 2 September 2009 (EDT)
::As stated above, if the title/username blacklist extension is installed, which is a very common one for MediaWiki, we can do exactly that. It has full wildcard functionality. I know some users have argued that the obscene titles and usernames are what make Assaulthead easy to spot, but I tend to disagree. The sheer ''volume'' of edits when an Assaulthead sock pops in make him easy to spot regardless of what username he's chosen or what his article titles are.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 12:47, 2 September 2009 (EDT)

:::2 and 5 seem to be good. The credit-card idea seems to be not ideal, since the card number could be fake or using other's card. --'''[[User:TX55|TX55]]'''''[[User talk:TX55|TALK]]'' 12:51, 2 September 2009 (EDT)
::::Hmmm ... what about we slow down new page creation and/or edits for new users only? Once every couple of minutes for your first week might be good. (Suggestion 6) --[[User:Jimsorenson|Jimsorenson]] 13:09, 2 September 2009 (EDT)
:::::Install the title/username blacklist extension, and flag certain keywords.
:::::If all else fails, nuke all proxies. --[[User:-Blackout-|-Blackout-]] 14:10, 2 September 2009 (EDT)
::::::Yeah, and I'd also support restricting page creation and file upload to the "autoconfirmed" group (that is, users who have been registered for X days and made Y edits), the same way page moves are already restricted. - [[User:SanityOrMadness|SanityOrMadness]] 16:33, 2 September 2009 (EDT)
:::::::That's a good idea. It's VERY rare that a first-time editor starts off by making a new page that actually belongs here. -- [[User:Repowers|Repowers]] 16:52, 2 September 2009 (EDT)
:::::::I agree wholeheartedly with restricting page creation for new users. Also, there's very words that we'd want to ban that would be in legit article titles (a new character named Detour, maybe), so a mod could create those pages if needed. But I honestly thought such restrictions would be impossible, otherwise they'd have been put in effect ages ago. - [[User:Cattleprod|Cattleprod]] 13:19, 3 September 2009 (EDT)

My own thoughts:

I agree that having creating new pages and uploading files be restricted to autoconfirmed accounts is a good idea. New editors should really be encouraged to make smaller edits and read up on image policies before tackling new articles and uploading files anyway, and any anon editor who's been around doing minor edits for a long while before getting an account is probably familiar enough with the goings-on around here to understand the wait.

I also agree that banning proxies is also a good idea. As has been said, this isn't a political site, so there's really no legitimate reason I can think of that someone should have to hide their true IP to edit here. Plus we can always possibly make a note someplace saying that if someone does actually have a legitimate reason to be behind a proxy, they can contact someone here to make an account and exception for them to use.

It might also be a good idea to require e-mail activation for new accounts. It's not that big a hassle for legitimate users, and it means that we at least have a confirmed e-mail address for any trolls (provided we disallow the "throw-away" types of e-mail domains from being used for that purpose).

Those are some lockdowns I think would minimally affect real new users, but would make it harder for trolls to sign up just to cause trouble. Especially if we install the New User log via extension or upgrade, to keep tabs on new usernames. (And we can even put any needed explanations on the lockdowns into a [[User:Jeysie/NewUser|New User Greeting]]. ;) ) --[[User:Jeysie|Jeysie]] 20:15, 2 September 2009 (EDT)

:Turning the setting on to require a confirmed email address means that you can no longer edit anonymously (anonymous editors don't have an email address). I just tried it on my test copy of MediaWiki. --[[User:Abates|abates]] 20:38, 2 September 2009 (EDT)
::There's no setting to require e-mail activation for new accounts, but ''not'' require e-mail addresses for editing in general? Well, that's the most utterly dumb thing I've ever heard. What were the Wiki software people thinking? --[[User:Jeysie|Jeysie]] 20:47, 2 September 2009 (EDT)
:::Actually, it makes perfect sense. If you want an e-mail address for your users, then you don't want the option of them editing WITHOUT an e-mail address. Otherwise, you're neither fish nor fowl. - [[User:SanityOrMadness|SanityOrMadness]] 21:25, 2 September 2009 (EDT)
::::I don't see how it makes sense at all. I can think of plenty of instances where I'd be OK with guest posting, yet still want to make sure that named accounts are real people. After all, guest accounts often draw scrutiny and have to deal with extra measures like spam filters, but posting under a named account often tends to confer a bit more trust. Especially in cases like us, where with 900+ users, it's not like you can instantly tell if a given user is new or not unless they happen to be one of the regulars, but seeing an anon IP is an instant indicator to watch the edit more closely. --[[User:Jeysie|Jeysie]] 21:35, 2 September 2009 (EDT)

:I'd be opposed to requiring a "non-throwaway" e-mail address for an account, since not everyone HAS one (or, at least, one they can use, since employers frown muchly on the use of work e-mail addresses for such things). After the credit card thing, that's the thing most likely to turn off legit editors. - [[User:SanityOrMadness|SanityOrMadness]] 21:25, 2 September 2009 (EDT)
::I don't mean throwaway in terms of Hotmail or GMail or what have you... pretty much everyone online is going to have at least one e-mail address they use for personal correspondence, even if it's webmail. I'm talking those temporary e-mail services like Mailinator where you can create an e-mail without registering just to answer the notification, then never use it again. If we let people use those, then requiring registration would be pointless anyway. --[[User:Jeysie|Jeysie]] 21:35, 2 September 2009 (EDT)
:::Guess who's back.
:::Can someone block him, delete his articles and actually create them? --[[User:-Blackout-|-Blackout-]] 12:11, 3 September 2009 (EDT)
::::Just out of curiosity, would it be possible to disable account creation for a while? --[[User:-Blackout-|-Blackout-]] 14:35, 3 September 2009 (EDT)
:::::I think that'd only be a stopgap, as he could easily just start spamming with "new articles" as an anon. --[[User:Lonegamer78|Lonegamer78]] 14:48, 3 September 2009 (EDT)

At present, what I'm in favor of:
*Throttling edits-per-minute down for anons and new accounts.
*Installing and implementing title blacklist for a select few words that are ''extremely'' unlikely to ever be used as legitimate article titles.
I think if we try these two on for size, we likely won't need more drastic measures.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 15:08, 3 September 2009 (EDT)
:Extremely doesn't cut it. The words would be "never ever going to be".
:On an unrelated note, this discussion has to be moved to its own page. It's becoming [[Galvatron (G1)|insanely]] [[Scale|long]]. --[[User:-Blackout-|-Blackout-]] 15:39, 3 September 2009 (EDT)

== Options, then... ==

# Install the [http://www.mediawiki.org/wiki/Extension:Title_Blacklist title blacklist] extension (now incorporating username blacklist, apparently), and add all the obscene terms you can think of to it. And Detour. A mitigation rather than solution, but one I think is pretty vital.
# Restrict page creation and file upload (if the latter isn't restricted already) to the "autoconfirmed" group, as with page moves, preventing anons and users with less than X edits, or who have been registered for less than Y days (I think X=50 and Y=4, but I'm not 100% sure about that) from doing so. A low-disruption option, and would also make vandalism harder.
# Throttle edits-per-minute for non-"autoconfirmed" users. Does this exist as an option?
# More anti-vandalism extensions: [http://www.mediawiki.org/wiki/Extension:AntiSpoof AntiSpoof] (prevent users from creating "confusable" nicks), [http://www.mediawiki.org/wiki/Extension:AbuseFilter AbuseFilter] (req. AntiSpoof)
# Block all proxies. This could cause problems with certain ISPs, apparently, and is something I think we should hold in reserve.
# Require e-mail confirmation. I don't see that this would help much with you-know-who unless you required an '''ISP''' e-mail. And that would prevent a bunch of legitimate users from registering. You'd also have to disable anonymous editing (even if a workaround could be found to allow anons while requiring an e-mail to get an account, you-know-who would simply stop registering).
I leave off the credit card idea quite deliberately.

Thoughts? - [[User:SanityOrMadness|SanityOrMadness]] 18:45, 3 September 2009 (EDT)
:I think blocking anonymous proxies should be our main action, whatever else we do... that will force him to use his real IP if he wants to try something, which means we'd be able to contact his real ISP. I fail to see why any legitimate ISP would need to have its members use an anonymous/open-to-all proxy, and there's no reason an individual would need to hide their IP to make legitimate edits here, so I can't imagine anonymous proxy blocking having much of an effect on legitimate users.
:I also think restricting page creation and file uploading would be the biggest help as well. Although admittedly that would mean having to patrol real articles for vandalism more closely. --[[User:Jeysie|Jeysie]] 18:57, 3 September 2009 (EDT)
::I don't think you can distinguish between open proxies and other proxies, except by checking the IP address against known open proxies. That is, if you block proxies, you block people editing from work, and from ISPs like AOL. - [[User:SanityOrMadness|SanityOrMadness]] 19:24, 3 September 2009 (EDT
:::Which is why ideally, I'd say we do the least intrusive of these first, and work our way up if it proves to not be enough. As for throttling anon and new edits, doesn't Wikipedia already do this?--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 19:28, 3 September 2009 (EDT)
::::[http://meta.wikimedia.org/wiki/Proxy_blocking This page] would seem to suggest that the proxy blocking only blocks open proxies, not ISP-based ones, so I still don't see why it would be a problem. --[[User:Jeysie|Jeysie]] 19:32, 3 September 2009 (EDT)
:::::Take a look at the [[wikipedia:meta:Proxy blocking#technical problems|#technical problems]] section ''on that very page''. - [[User:SanityOrMadness|SanityOrMadness]] 19:59, 3 September 2009 (EDT)
::::::Well, TBH, if we can't implement that, then I don't see the other options stopping him at all; merely changing the form his vandalism will take. Whereas forcing him to use his real IP either would make him either stop rather than reveal himself, or will give us ammunition to take to his ISP. --[[User:Jeysie|Jeysie]] 20:05, 3 September 2009 (EDT)

:Looks good, although 5 and 6 should probably be left out of the 'first wave' of implementation, it could cause a lot of headaches for legit users. I honestly thought 1 and 2 were impossible, since I can think of no logical reason for them not to already be in effect. - [[User:Cattleprod|Cattleprod]] 18:58, 3 September 2009 (EDT)

:Re item 3 - it's unlikely to have much of an effect on YKW because he only makes one or two edits a minute anyway. --[[User:Abates|abates]] 19:52, 3 September 2009 (EDT)
::Who's YKW? --[[User:-Blackout-|-Blackout-]] 10:56, 4 September 2009 (EDT)
:::"You-Know-Who". --[[User:Detour|Detour]] 18:15, 4 September 2009 (EDT)

===When?===
http://www.mediawiki.org/wiki/Manual:User_rights

Yes, it requires access to LocalSettings.php, and so McFly or Scout will have to do it, but

$wgGroupPermissions['autoconfirmed']['createpage'] = true;
$wgGroupPermissions['autoconfirmed']['upload'] = true;
$wgGroupPermissions['autoconfirmed']['reupload'] = true;
$wgGroupPermissions['autoconfirmed']['reupload-shared'] = true;

...should all be added forthwith, yes? - [[User:SanityOrMadness|SanityOrMadness]] 23:30, 13 September 2009 (EDT)

:If it means cutting down on seeing that junk on the Recent Changes page, HELL YES.
:EDIT: A bit hasty on my response, but it could be an alternative or a secondary level next to blacklisting the words. --[[User:Lonegamer78|Lonegamer78]] 00:01, 14 September 2009 (EDT)

::Oh, blacklisting the obvious words is doable via LocalSettings.php too (or by extensions, or a combination). I forget how offhand, though. - [[User:SanityOrMadness|SanityOrMadness]] 01:04, 14 September 2009 (EDT)

== Something semi-related... ==

If the title blacklist extension was installed, page names ending in "/" could be blocked. Spambots appear to be showing an increasing preference for those. - [[User:SanityOrMadness|SanityOrMadness]] 18:08, 4 September 2009 (EDT)
:Really? Those must be popping up when I'm off-line, because I never see any of those on the RC. --[[User:-Blackout-|-Blackout-]] 02:52, 5 September 2009 (EDT)

== Not another one..... ==

Lord Voldemort (read: Assaulthead) has returned.

Also, on a somewhat related note, correct me if I'm wrong, but wasn't "deny recognition" imposed on us by Wikia in the first place? --[[User:-Blackout-|-Blackout-]] 13:32, 10 September 2009 (EDT)
:Not imposed so much as we adopted it because it was a good idea. It's a Wikipedia policy, not a Wikia policy.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 13:56, 10 September 2009 (EDT)
::Exactly. WAS a good idea. Now it's turned into "ignore a problem at all cost". --[[User:-Blackout-|-Blackout-]] 14:02, 10 September 2009 (EDT)
:::It ''was'' ignore the problem. Now we're addressing it. Granted, I'd prefer to be taking more action, but we have options and we're discussing them. -- [[User:SFH|SFH]] 15:18, 10 September 2009 (EDT)
::::The six we have should do the trick. We do the main five first, and then if all else fails, we nuke all proxies. --[[User:-Blackout-|-Blackout-]] 12:56, 11 September 2009 (EDT)

== Is there a sysop in the house ==

[[User:Assmaster]] needs dealt with. - [[User:SanityOrMadness|SanityOrMadness]] 15:03, 12 September 2009 (EDT)
:[[Image:GuessIronhidesEmotion.jpg|left|200px|thumb|WOW. WHAT A SURPRISE.]] --[[User:-Blackout-|-Blackout-]] 15:26, 12 September 2009 (EDT)

== Could he finally be gone? Nah..... ==

Three days and no Recent Changes flooded with swear words and parts of the female anatomy YKW has never seen.

Just out of curiosity, has someone put together some actual defences yet, or is YKW just trying to think up some new article titles before he starts spamming up the RC again? --[[User:-Blackout-|-Blackout-]] 08:57, 16 September 2009 (EDT)

:::I don't see him yet.....could the message have finally reached as far as the brain he keeps in a jar beneath his bed? --[[User:-Blackout-|-Blackout-]] 12:06, 22 September 2009 (EDT)

== New vandalism ==

I'm going to assume that none of the admins are on right now, but we have a mild situation. -- [[User:SFH|SFH]] 21:34, 25 June 2010 (EDT)
:Yeah, I remember, something like this happened on another wiki I went to. But since we're presently the only real users online, I believe, all we can do is mark the pages he makes and wait. --[[User:NCZ|NCZ]] 21:36, 25 June 2010 (EDT)
::Ugh. Why do all the admins have to be offline ''now?'' --[[User:NCZ|NCZ]] 21:56, 25 June 2010 (EDT)
:::Probably all partying at BotCon. Lucky bastards. --[[User:Khajidha|Khajidha]] 22:05, 25 June 2010 (EDT)
::::That's what I thought. At least you're here, Khajidha; at least with more users we can do what we can faster. --[[User:NCZ|NCZ]] 22:09, 25 June 2010 (EDT)
:::::(sigh) Hopefully sooner or later the guy will realize he should actually find himself a real life. And that everything he's doing can be undone in about two clicks. --[[User:Jeysie|Jeysie]] 23:17, 25 June 2010 (EDT)
::::::Indeed. He's been at it for ''two. HOURS.'' Anyway, we really need to do something so stuff like this doesn't happen again. --[[User:NCZ|NCZ]] 23:20, 25 June 2010 (EDT)
:::::::Oh thank heavens, it's Suki!
:::::::And, weren't we going to implement blocking anons and new users from uploading pics or creating new pages? --[[User:Jeysie|Jeysie]] 23:24, 25 June 2010 (EDT)
::::::::SUKI, WE LOVE YA! <3
::::::::But yeah, I hope we get to implement that new policy soon. --[[User:Lonegamer78|Lonegamer78]] 23:25, 25 June 2010 (EDT)
:::::::::ThankyouthankyouTHANKYOUSUKIBRITS. I'm personally a tad skeptical on the idea, since some new users do have good starts (cough, such as myself, cough cough), but I'm still completely against vandalism. --[[User:NCZ|NCZ]] 23:28, 25 June 2010 (EDT)
::::::::::Newbies limited to a certain number of uploads in a 24-hour period for two months before being released to upload as many as they please (within limits, of course)? --[[User:Lonegamer78|Lonegamer78]] 23:35, 25 June 2010 (EDT)
:::::::::::A new legitimate user might show up with plenty of needed images. A limit's good, as long as when they reach the limit the error message gives clear instructions about how to ask for permission to upload more stuff. - [[User:Cattleprod|Cattleprod]] 23:46, 25 June 2010 (EDT)
::::::::::::Well, it doesn't take long to become a non-new user by wiki software standards, so I'd think a real new user would be willing to be patient, if we limit uploading and new pages to Autoconfirmed. And if we install something that keeps track of new users we can watch for any patient vandals. --[[User:Jeysie|Jeysie]] 23:48, 25 June 2010 (EDT)
:::::::::::::NICE WORK SUKI!! Now the recent changes (for (main)) is clean.
:::::::::::::And I vote for the limit method. --'''[[User:TX55|TX55]]'''''[[User talk:TX55|TALK]]'' 23:53, 25 June 2010 (EDT)
::::::::::::::YAY SUKI!!!!!!!!!!!!!!!!! Oh, and count me in for the limit thing. Any new user who really desires to help will understand. --[[User:Khajidha|Khajidha]] 23:57, 25 June 2010 (EDT)
:::::::::::::::I can live with that idea. --[[User:NCZ|NCZ]] 12:34, 26 June 2010 (EDT)
Now, what can we do about the images our little vandal uploaded that were then reverted? At least the picture he(?) used wasn't something vile, but I don't like having that alias appearing in the histories of the images. --[[User:Khajidha|Khajidha]] 12:32, 26 June 2010 (EDT)
:Yeah, same. Can the most recent revision of an image be deleted along with his spam? We ''did''' revert it, but the image histories are still kind of ugly. --[[User:NCZ|NCZ]] 12:34, 26 June 2010 (EDT)
::It is possible for admins to delete "interim" images from histories, as I've seen them do it before. You'd have to get an admin to actually do so, though. --[[User:Jeysie|Jeysie]] 23:07, 28 June 2010 (EDT)
:::I'm doing it now. It's just a real chore for the sheer volume of images. Take me awhile, but I should be able to.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 23:23, 28 June 2010 (EDT)

So, what to do with the new vandal? Add the name to that black list? --[[User:Lonegamer78|Lonegamer78]] 01:32, 30 June 2010 (EDT)
:Is there ''anything'' we can do to kill this guy? Because I ''do not'' want to see this fucking idiot's crap all over the wiki. --[[User:-Blackout-|-Blackout-]] 03:01, 30 June 2010 (EDT)
::I'm hoping that we could still pull the IP logs, but we'd need our IT folks to be able to do so. --[[User:Lonegamer78|Lonegamer78]] 03:07, 30 June 2010 (EDT)

== Williamfans ==

We have a user named [[Special:Contributions/Williamfans|Williamfans]] who is changing factions for various characters (i.e. giving [[Ultra Magnus (RID)|Ultra Magnus]] a Decepticon faction symbol). I suspect he is an alt of the currently-blocked [[Special:Contributions/William|User:William]], as they both have similar names and are both clear vandals. --[[User:NCZ|NCZ]] 15:44, 18 July 2010 (EDT)
:I'd say that's grounds enough to block the main account permanently. --[[User:-Blackout-|-Blackout-]] 06:09, 19 July 2010 (EDT)

== Spambots ==

Is there a way to prevent people creating pages that have "Talk:/" in their titles? Because these spambots are starting to annoy me. --[[User:-Blackout-|-Blackout-]] 14:09, 21 September 2010 (EDT)
:Is there ''anything'' we can do about these spambots? I count 31 blocked spambots within the past month. --[[User:-Blackout-|-Blackout-]] 04:23, 4 November 2010 (EDT)
:Yes. MediaWiki:Titleblacklist. Google it and you will see the MediaWiki extension.

== if proxies are blocked, innocent bystanders can be blocked. ==

I have a concern that when proxies are blocked, other people are blocked too. Guess how many people use proxies in the world for good purpouses? For example, 3, Verizon, BT, LGFL, and AOL use proxies! What about the open proxies? Many people use open proxies to be private, to bypass blocks on TFWiki.net or to bypass history recording. Why not make a IP block exempt flag? Please help all the users that want to be private!
:I.....really don't see why anyone would need that flag here. --[[User:-Blackout-|-Blackout-]] 13:02, 3 December 2010 (EST)

== CU ==

Troll guy raised a valid point. Why ''don't'' we use CheckUser? (For the uninitiated, it's a MediaWiki extension which creates an additional usergroup called "CheckUser", which can see people's IPs) I know we have the extension installed because I saw McFly grant the userright to himself some time ago. It would mean we wouldn't have to wait for the IT people to pull the IP logs: <s>Walky could just grant himself or someone else the userright and they would be able to see the IPs.</s> (No need to do that, I just saw that Monzo and Scout have it too --[[User:-Blackout-|-Blackout-]] 04:21, 6 December 2010 (EST))

The small glitch with that is that the CU data expires after some time. (90 days, I think) --[[User:-Blackout-|-Blackout-]] 04:18, 6 December 2010 (EST)

You can find sockpuppets and trace a group of vandals to a IP address/range. It can find evidence for bans and full-scale reports for ISPs to recive. [[User:ArchtransitLightspeed333|TransformersFan133]] 06:54, 18 December 2010 (EST)
:From my experience, ISPs will only accept full-blown server logs such as those produced by Apache (or, in our case, Squid). --[[User:Abates|abates]] 16:14, 18 December 2010 (EST)
::We could still use it to root out and block vandal IPs. --[[User:-Blackout-|-Blackout-]] 04:51, 19 December 2010 (EST)

Wikipedia uses Check User to create ISP complaints, so you could do so.

If CheckUser is used, won't there be a Ombudsman Commission or some variant? Someone needs to know if Checkuser is abused to others's advantage. {{unsigned|ArchtransitLightspeed333}}
:I'm not entirely sure how you could abuse checkuser. --[[User:Abates|abates]] 07:51, 30 June 2011 (EDT)

Pointing it at a user who is innocent. --[[User:Lolclerk5|Lolclerk5]] 06:18, 29 August 2011 (EDT)

== Assaulthead ==

You could do the following:

Modify localsettings.php so that only admins create a account.
Yes, LocalSettings.php.
On the front page, put the email address of '''one''' admin so that people ask for the account instead.
This is to slow down Assaulthead getting the account.
I remember [http://encyc.org Encyc]. It had lots of spam, then they shut registration down so that vandals couldn't spam as much as before.
Also, put a CAPTCHA (eg. "What is the leader of the Autobots? ) on every page creation to slow down vandals.
--Lolclerk

== Proxies ==

Maybe you could do the following:

* Block open Proxies.

* Target proxy lists like samair.ru or create some bot that blocks proxies. Hopefully it will have some page that specifies lists of proxies to block. Only sysops will edit the page.

* Implement a CAPTCHA for each image upload, page creation and page move. Bots are exempt. (Bots need the bot flag)

* Block words using an abuse filter.
Give some report page to report errors.

* Only give account creation privileges to sysops. That way, vandals are slowed down by a day. In "Log in", provide a mailto link to a admin to request an account.

* Flush out Assaulthead images. (of course only server admins can do that.)

Hope this helps,
--[[User:Lolclerk5|Lolclerk5]] 16:55, 30 August 2011 (EDT)

MediaWiki talk:Community Portal/Vandalism

2011-08-29T10:38:48Z

Lolclerk5: /* Spambots */

User talk:Lolclerk5

2011-08-29T10:32:16Z

Lolclerk5: /* Passwords */

==Archived talk page==

Hi, it's not necessary to make categories for sockpuppets and the like. Also, several times now when editing you'd removed huge chunks of articles. Please be more careful when editing, and perhaps use the preview button to make sure you're not deleting anything unintentionally. --[[User:Abates|abates]] 17:46, 3 December 2010 (EST)

== I dont vandalise tfwiki ==

My nickname is a bit misleading, I ONLY VANDALISE WIKIPEDIA AND OTHER WIKIS, NOT TFWIKI.NET!

== I have changed nickname ==

I have learnt my lesson and a very sorry to TFWiki.net. I have intent to revert vandalism and help the wiki. [[User:ArchtransitLightspeed333|TransformersFan133]] 14:47, 6 December 2010 (EST)

==Passwords==
You didn't notice that the login form has a button to "Email password" which you can use to reset your password? --[[User:Abates|abates]] 06:30, 29 August 2011 (EDT)
Yes. I didn't. --[[User:Lolclerk5|Lolclerk5]] 06:32, 29 August 2011 (EDT)

MediaWiki talk:Community Portal/Vandalism

2011-08-29T10:29:33Z

Lolclerk5: /* Assaulthead */ new section

== Our new resident vandal..... ==

Well, it seems that we might have a new resident vandal on our hands.

I suggest we block this guy, ban his IP if he continues, play whack-a-mole with his IPs if he's on a dynamic-IP, and if all else fails, temporarily block all account creation. --[[User:-Blackout-|-Blackout-]] 14:53, 24 August 2009 (EDT)
:He is likely still Assaulthead.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 14:55, 24 August 2009 (EDT)
::Yeah, he does have Assaulthead's rabid obsession with reproduction, although this time he no longer appears to be repressing homosexual urges. I swear he'd be a perv if I thought he was old enough to understand half of this. Still, this is starting to get out of hand. Our policy of "deny recognition" is starting to become "ignoring a problem". There was talk about contacting AT&T or something along those lines to prevent him accessing our site anymore. What happened with that? -- [[User:SFH|SFH]] 14:59, 24 August 2009 (EDT)
:::We need McFly and Scout to pull out the logs, except we haven't heard from either of them in a long while. --[[User:Lonegamer78|Lonegamer78]] 15:05, 24 August 2009 (EDT)
::::Well, he has to run out of proxy servers sometime.....
::::At least, we can limit his choice of user and article names via the title blacklist. --[[User:-Blackout-|-Blackout-]] 15:19, 24 August 2009 (EDT)
::::: *takes another quick look at the RC* I really need to create the remaining SG pages tomorrow. That way, he'll stop messing around with them. --[[User:-Blackout-|-Blackout-]] 15:24, 24 August 2009 (EDT)
::::::I have to admit I keep putting off making the Ark and Nemesis articles because of all the fiction-writeups they'll need... *needs to stop procrastinating and get back into things* --[[User:Jeysie|Jeysie]] 20:10, 24 August 2009 (EDT)

::::Er, on that score, regular backup are still being done, right? Anyone? --[[User:Abates|abates]] 20:46, 24 August 2009 (EDT)
:::::Look who's back.
:::::And guess what: he's decided to confirm our suspicions and reveal that he's Assaulthead. The title of one of the articles he made is a giveaway.
:::::But seriously, can't we just get this guy off our backs for a while by blocking him, putting his user and article names on the title blacklist and temporarily disabling account creation? At least it'll buy us some time while we try and wake up McFly and Scout. --[[User:-Blackout-|-Blackout-]] 12:26, 25 August 2009 (EDT)
::::::PLEASE, SOMEONE KILL THIS GUY ALREADY.
:::::: THANK YOU. --[[User:-Blackout-|-Blackout-]] 12:17, 26 August 2009 (EDT)
:::::::Alright, I need to get this off my chest.
:::::::This guy is seriously disturbed. --[[User:-Blackout-|-Blackout-]] 14:33, 28 August 2009 (EDT)
:We have logs going back two weeks. Anyone want an 80MB gzipped apache log? Any tracking that I've done in the past showed that he was coming from multiple IPs as he's blocked, so the sad fact is, he's NOT running out of proxies. I'd almost propose that we start looking into blocking edits from proxied users. I understand the negative implications, but this isn't exactly a hotbed of political commentary. All that said, the records I have for edits made to articles that were obviously kicked off by him have IPs coming from blocks owned by Bank of America, Best Buy, Level 3 Communications, Verizon, Bell Canada, BellSouth, and AT&T. Some of those might be editors cleaning up the mess from home, some of them might be people catching the issue from work, I don't know. We *could* attempt a banhammer of epic proportions, but I suspect that we're going to take out a lot of innocent bystanders. --[[User:McFly|McFly]] 11:08, 2 September 2009 (EDT)
::As many have suggested, repeatedly, have we considered title/username blacklist? If only to keep the recent changes page a bit less... obscene?--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 11:28, 2 September 2009 (EDT)
:::This. Takes away all his fun. As for blocking proxies.... how common are legitimate anons using proxies? We need to have a grasp on that before we take that step. -- [[User:Repowers|Repowers]] 11:37, 2 September 2009 (EDT)

Just brainstorming ... I don't think my ideas are a good solution exactly, but maybe they'll spark something.
* 1: A waiting period for new accounts - a big turn-off for new users.
* 2: A way to flag certain keywords so that users employing them have their edits shunted into some sort of moderator-approval required place. Pornography, vagina, asshole, etc ... I suspect he'll have less fun if he can't use his naughty words. (Feasibility?)
* 3: A credit-card required for new accounts. Violations result in a fine. (Only kept for, say, a week. Has serious data-security and storage implications and opens us up to potential liability. Also a big turn off)
* 4: Some combination of 1 and 3, with a credit-card as a bypass for the waiting period.
* 5: Some combination of the above and proxy-detection.
--[[User:Jimsorenson|Jimsorenson]] 11:28, 2 September 2009 (EDT)
::I think the credit card ideas (3 and 4) are an absolute-no-no. Restricting account creation would only be worth doing if anonymous editing was disabled, which there's been heavy reluctance to do in the past. Otherwise flagging keywords = yes; restricting ''page creation'' to autoconfirmed users = yes; proxy blocking = maybe, if other measures fail. - [[User:SanityOrMadness|SanityOrMadness]] 16:33, 2 September 2009 (EDT)

:''flag certain keywords''
:That sounds like the simplest solution, to my admittedly layman ears. Make it impossible to create an account or a new page that includes "Detour" or any of the usual dirty words. --[[User:Thylacine 2000|Thylacine 2000]] 12:05, 2 September 2009 (EDT)
::As stated above, if the title/username blacklist extension is installed, which is a very common one for MediaWiki, we can do exactly that. It has full wildcard functionality. I know some users have argued that the obscene titles and usernames are what make Assaulthead easy to spot, but I tend to disagree. The sheer ''volume'' of edits when an Assaulthead sock pops in make him easy to spot regardless of what username he's chosen or what his article titles are.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 12:47, 2 September 2009 (EDT)

:::2 and 5 seem to be good. The credit-card idea seems to be not ideal, since the card number could be fake or using other's card. --'''[[User:TX55|TX55]]'''''[[User talk:TX55|TALK]]'' 12:51, 2 September 2009 (EDT)
::::Hmmm ... what about we slow down new page creation and/or edits for new users only? Once every couple of minutes for your first week might be good. (Suggestion 6) --[[User:Jimsorenson|Jimsorenson]] 13:09, 2 September 2009 (EDT)
:::::Install the title/username blacklist extension, and flag certain keywords.
:::::If all else fails, nuke all proxies. --[[User:-Blackout-|-Blackout-]] 14:10, 2 September 2009 (EDT)
::::::Yeah, and I'd also support restricting page creation and file upload to the "autoconfirmed" group (that is, users who have been registered for X days and made Y edits), the same way page moves are already restricted. - [[User:SanityOrMadness|SanityOrMadness]] 16:33, 2 September 2009 (EDT)
:::::::That's a good idea. It's VERY rare that a first-time editor starts off by making a new page that actually belongs here. -- [[User:Repowers|Repowers]] 16:52, 2 September 2009 (EDT)
:::::::I agree wholeheartedly with restricting page creation for new users. Also, there's very words that we'd want to ban that would be in legit article titles (a new character named Detour, maybe), so a mod could create those pages if needed. But I honestly thought such restrictions would be impossible, otherwise they'd have been put in effect ages ago. - [[User:Cattleprod|Cattleprod]] 13:19, 3 September 2009 (EDT)

My own thoughts:

I agree that having creating new pages and uploading files be restricted to autoconfirmed accounts is a good idea. New editors should really be encouraged to make smaller edits and read up on image policies before tackling new articles and uploading files anyway, and any anon editor who's been around doing minor edits for a long while before getting an account is probably familiar enough with the goings-on around here to understand the wait.

I also agree that banning proxies is also a good idea. As has been said, this isn't a political site, so there's really no legitimate reason I can think of that someone should have to hide their true IP to edit here. Plus we can always possibly make a note someplace saying that if someone does actually have a legitimate reason to be behind a proxy, they can contact someone here to make an account and exception for them to use.

It might also be a good idea to require e-mail activation for new accounts. It's not that big a hassle for legitimate users, and it means that we at least have a confirmed e-mail address for any trolls (provided we disallow the "throw-away" types of e-mail domains from being used for that purpose).

Those are some lockdowns I think would minimally affect real new users, but would make it harder for trolls to sign up just to cause trouble. Especially if we install the New User log via extension or upgrade, to keep tabs on new usernames. (And we can even put any needed explanations on the lockdowns into a [[User:Jeysie/NewUser|New User Greeting]]. ;) ) --[[User:Jeysie|Jeysie]] 20:15, 2 September 2009 (EDT)

:Turning the setting on to require a confirmed email address means that you can no longer edit anonymously (anonymous editors don't have an email address). I just tried it on my test copy of MediaWiki. --[[User:Abates|abates]] 20:38, 2 September 2009 (EDT)
::There's no setting to require e-mail activation for new accounts, but ''not'' require e-mail addresses for editing in general? Well, that's the most utterly dumb thing I've ever heard. What were the Wiki software people thinking? --[[User:Jeysie|Jeysie]] 20:47, 2 September 2009 (EDT)
:::Actually, it makes perfect sense. If you want an e-mail address for your users, then you don't want the option of them editing WITHOUT an e-mail address. Otherwise, you're neither fish nor fowl. - [[User:SanityOrMadness|SanityOrMadness]] 21:25, 2 September 2009 (EDT)
::::I don't see how it makes sense at all. I can think of plenty of instances where I'd be OK with guest posting, yet still want to make sure that named accounts are real people. After all, guest accounts often draw scrutiny and have to deal with extra measures like spam filters, but posting under a named account often tends to confer a bit more trust. Especially in cases like us, where with 900+ users, it's not like you can instantly tell if a given user is new or not unless they happen to be one of the regulars, but seeing an anon IP is an instant indicator to watch the edit more closely. --[[User:Jeysie|Jeysie]] 21:35, 2 September 2009 (EDT)

:I'd be opposed to requiring a "non-throwaway" e-mail address for an account, since not everyone HAS one (or, at least, one they can use, since employers frown muchly on the use of work e-mail addresses for such things). After the credit card thing, that's the thing most likely to turn off legit editors. - [[User:SanityOrMadness|SanityOrMadness]] 21:25, 2 September 2009 (EDT)
::I don't mean throwaway in terms of Hotmail or GMail or what have you... pretty much everyone online is going to have at least one e-mail address they use for personal correspondence, even if it's webmail. I'm talking those temporary e-mail services like Mailinator where you can create an e-mail without registering just to answer the notification, then never use it again. If we let people use those, then requiring registration would be pointless anyway. --[[User:Jeysie|Jeysie]] 21:35, 2 September 2009 (EDT)
:::Guess who's back.
:::Can someone block him, delete his articles and actually create them? --[[User:-Blackout-|-Blackout-]] 12:11, 3 September 2009 (EDT)
::::Just out of curiosity, would it be possible to disable account creation for a while? --[[User:-Blackout-|-Blackout-]] 14:35, 3 September 2009 (EDT)
:::::I think that'd only be a stopgap, as he could easily just start spamming with "new articles" as an anon. --[[User:Lonegamer78|Lonegamer78]] 14:48, 3 September 2009 (EDT)

At present, what I'm in favor of:
*Throttling edits-per-minute down for anons and new accounts.
*Installing and implementing title blacklist for a select few words that are ''extremely'' unlikely to ever be used as legitimate article titles.
I think if we try these two on for size, we likely won't need more drastic measures.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 15:08, 3 September 2009 (EDT)
:Extremely doesn't cut it. The words would be "never ever going to be".
:On an unrelated note, this discussion has to be moved to its own page. It's becoming [[Galvatron (G1)|insanely]] [[Scale|long]]. --[[User:-Blackout-|-Blackout-]] 15:39, 3 September 2009 (EDT)

== Options, then... ==

# Install the [http://www.mediawiki.org/wiki/Extension:Title_Blacklist title blacklist] extension (now incorporating username blacklist, apparently), and add all the obscene terms you can think of to it. And Detour. A mitigation rather than solution, but one I think is pretty vital.
# Restrict page creation and file upload (if the latter isn't restricted already) to the "autoconfirmed" group, as with page moves, preventing anons and users with less than X edits, or who have been registered for less than Y days (I think X=50 and Y=4, but I'm not 100% sure about that) from doing so. A low-disruption option, and would also make vandalism harder.
# Throttle edits-per-minute for non-"autoconfirmed" users. Does this exist as an option?
# More anti-vandalism extensions: [http://www.mediawiki.org/wiki/Extension:AntiSpoof AntiSpoof] (prevent users from creating "confusable" nicks), [http://www.mediawiki.org/wiki/Extension:AbuseFilter AbuseFilter] (req. AntiSpoof)
# Block all proxies. This could cause problems with certain ISPs, apparently, and is something I think we should hold in reserve.
# Require e-mail confirmation. I don't see that this would help much with you-know-who unless you required an '''ISP''' e-mail. And that would prevent a bunch of legitimate users from registering. You'd also have to disable anonymous editing (even if a workaround could be found to allow anons while requiring an e-mail to get an account, you-know-who would simply stop registering).
I leave off the credit card idea quite deliberately.

Thoughts? - [[User:SanityOrMadness|SanityOrMadness]] 18:45, 3 September 2009 (EDT)
:I think blocking anonymous proxies should be our main action, whatever else we do... that will force him to use his real IP if he wants to try something, which means we'd be able to contact his real ISP. I fail to see why any legitimate ISP would need to have its members use an anonymous/open-to-all proxy, and there's no reason an individual would need to hide their IP to make legitimate edits here, so I can't imagine anonymous proxy blocking having much of an effect on legitimate users.
:I also think restricting page creation and file uploading would be the biggest help as well. Although admittedly that would mean having to patrol real articles for vandalism more closely. --[[User:Jeysie|Jeysie]] 18:57, 3 September 2009 (EDT)
::I don't think you can distinguish between open proxies and other proxies, except by checking the IP address against known open proxies. That is, if you block proxies, you block people editing from work, and from ISPs like AOL. - [[User:SanityOrMadness|SanityOrMadness]] 19:24, 3 September 2009 (EDT
:::Which is why ideally, I'd say we do the least intrusive of these first, and work our way up if it proves to not be enough. As for throttling anon and new edits, doesn't Wikipedia already do this?--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 19:28, 3 September 2009 (EDT)
::::[http://meta.wikimedia.org/wiki/Proxy_blocking This page] would seem to suggest that the proxy blocking only blocks open proxies, not ISP-based ones, so I still don't see why it would be a problem. --[[User:Jeysie|Jeysie]] 19:32, 3 September 2009 (EDT)
:::::Take a look at the [[wikipedia:meta:Proxy blocking#technical problems|#technical problems]] section ''on that very page''. - [[User:SanityOrMadness|SanityOrMadness]] 19:59, 3 September 2009 (EDT)
::::::Well, TBH, if we can't implement that, then I don't see the other options stopping him at all; merely changing the form his vandalism will take. Whereas forcing him to use his real IP either would make him either stop rather than reveal himself, or will give us ammunition to take to his ISP. --[[User:Jeysie|Jeysie]] 20:05, 3 September 2009 (EDT)

:Looks good, although 5 and 6 should probably be left out of the 'first wave' of implementation, it could cause a lot of headaches for legit users. I honestly thought 1 and 2 were impossible, since I can think of no logical reason for them not to already be in effect. - [[User:Cattleprod|Cattleprod]] 18:58, 3 September 2009 (EDT)

:Re item 3 - it's unlikely to have much of an effect on YKW because he only makes one or two edits a minute anyway. --[[User:Abates|abates]] 19:52, 3 September 2009 (EDT)
::Who's YKW? --[[User:-Blackout-|-Blackout-]] 10:56, 4 September 2009 (EDT)
:::"You-Know-Who". --[[User:Detour|Detour]] 18:15, 4 September 2009 (EDT)

===When?===
http://www.mediawiki.org/wiki/Manual:User_rights

Yes, it requires access to LocalSettings.php, and so McFly or Scout will have to do it, but

$wgGroupPermissions['autoconfirmed']['createpage'] = true;
$wgGroupPermissions['autoconfirmed']['upload'] = true;
$wgGroupPermissions['autoconfirmed']['reupload'] = true;
$wgGroupPermissions['autoconfirmed']['reupload-shared'] = true;

...should all be added forthwith, yes? - [[User:SanityOrMadness|SanityOrMadness]] 23:30, 13 September 2009 (EDT)

:If it means cutting down on seeing that junk on the Recent Changes page, HELL YES.
:EDIT: A bit hasty on my response, but it could be an alternative or a secondary level next to blacklisting the words. --[[User:Lonegamer78|Lonegamer78]] 00:01, 14 September 2009 (EDT)

::Oh, blacklisting the obvious words is doable via LocalSettings.php too (or by extensions, or a combination). I forget how offhand, though. - [[User:SanityOrMadness|SanityOrMadness]] 01:04, 14 September 2009 (EDT)

== Something semi-related... ==

If the title blacklist extension was installed, page names ending in "/" could be blocked. Spambots appear to be showing an increasing preference for those. - [[User:SanityOrMadness|SanityOrMadness]] 18:08, 4 September 2009 (EDT)
:Really? Those must be popping up when I'm off-line, because I never see any of those on the RC. --[[User:-Blackout-|-Blackout-]] 02:52, 5 September 2009 (EDT)

== Not another one..... ==

Lord Voldemort (read: Assaulthead) has returned.

Also, on a somewhat related note, correct me if I'm wrong, but wasn't "deny recognition" imposed on us by Wikia in the first place? --[[User:-Blackout-|-Blackout-]] 13:32, 10 September 2009 (EDT)
:Not imposed so much as we adopted it because it was a good idea. It's a Wikipedia policy, not a Wikia policy.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 13:56, 10 September 2009 (EDT)
::Exactly. WAS a good idea. Now it's turned into "ignore a problem at all cost". --[[User:-Blackout-|-Blackout-]] 14:02, 10 September 2009 (EDT)
:::It ''was'' ignore the problem. Now we're addressing it. Granted, I'd prefer to be taking more action, but we have options and we're discussing them. -- [[User:SFH|SFH]] 15:18, 10 September 2009 (EDT)
::::The six we have should do the trick. We do the main five first, and then if all else fails, we nuke all proxies. --[[User:-Blackout-|-Blackout-]] 12:56, 11 September 2009 (EDT)

== Is there a sysop in the house ==

[[User:Assmaster]] needs dealt with. - [[User:SanityOrMadness|SanityOrMadness]] 15:03, 12 September 2009 (EDT)
:[[Image:GuessIronhidesEmotion.jpg|left|200px|thumb|WOW. WHAT A SURPRISE.]] --[[User:-Blackout-|-Blackout-]] 15:26, 12 September 2009 (EDT)

== Could he finally be gone? Nah..... ==

Three days and no Recent Changes flooded with swear words and parts of the female anatomy YKW has never seen.

Just out of curiosity, has someone put together some actual defences yet, or is YKW just trying to think up some new article titles before he starts spamming up the RC again? --[[User:-Blackout-|-Blackout-]] 08:57, 16 September 2009 (EDT)

:::I don't see him yet.....could the message have finally reached as far as the brain he keeps in a jar beneath his bed? --[[User:-Blackout-|-Blackout-]] 12:06, 22 September 2009 (EDT)

== New vandalism ==

I'm going to assume that none of the admins are on right now, but we have a mild situation. -- [[User:SFH|SFH]] 21:34, 25 June 2010 (EDT)
:Yeah, I remember, something like this happened on another wiki I went to. But since we're presently the only real users online, I believe, all we can do is mark the pages he makes and wait. --[[User:NCZ|NCZ]] 21:36, 25 June 2010 (EDT)
::Ugh. Why do all the admins have to be offline ''now?'' --[[User:NCZ|NCZ]] 21:56, 25 June 2010 (EDT)
:::Probably all partying at BotCon. Lucky bastards. --[[User:Khajidha|Khajidha]] 22:05, 25 June 2010 (EDT)
::::That's what I thought. At least you're here, Khajidha; at least with more users we can do what we can faster. --[[User:NCZ|NCZ]] 22:09, 25 June 2010 (EDT)
:::::(sigh) Hopefully sooner or later the guy will realize he should actually find himself a real life. And that everything he's doing can be undone in about two clicks. --[[User:Jeysie|Jeysie]] 23:17, 25 June 2010 (EDT)
::::::Indeed. He's been at it for ''two. HOURS.'' Anyway, we really need to do something so stuff like this doesn't happen again. --[[User:NCZ|NCZ]] 23:20, 25 June 2010 (EDT)
:::::::Oh thank heavens, it's Suki!
:::::::And, weren't we going to implement blocking anons and new users from uploading pics or creating new pages? --[[User:Jeysie|Jeysie]] 23:24, 25 June 2010 (EDT)
::::::::SUKI, WE LOVE YA! <3
::::::::But yeah, I hope we get to implement that new policy soon. --[[User:Lonegamer78|Lonegamer78]] 23:25, 25 June 2010 (EDT)
:::::::::ThankyouthankyouTHANKYOUSUKIBRITS. I'm personally a tad skeptical on the idea, since some new users do have good starts (cough, such as myself, cough cough), but I'm still completely against vandalism. --[[User:NCZ|NCZ]] 23:28, 25 June 2010 (EDT)
::::::::::Newbies limited to a certain number of uploads in a 24-hour period for two months before being released to upload as many as they please (within limits, of course)? --[[User:Lonegamer78|Lonegamer78]] 23:35, 25 June 2010 (EDT)
:::::::::::A new legitimate user might show up with plenty of needed images. A limit's good, as long as when they reach the limit the error message gives clear instructions about how to ask for permission to upload more stuff. - [[User:Cattleprod|Cattleprod]] 23:46, 25 June 2010 (EDT)
::::::::::::Well, it doesn't take long to become a non-new user by wiki software standards, so I'd think a real new user would be willing to be patient, if we limit uploading and new pages to Autoconfirmed. And if we install something that keeps track of new users we can watch for any patient vandals. --[[User:Jeysie|Jeysie]] 23:48, 25 June 2010 (EDT)
:::::::::::::NICE WORK SUKI!! Now the recent changes (for (main)) is clean.
:::::::::::::And I vote for the limit method. --'''[[User:TX55|TX55]]'''''[[User talk:TX55|TALK]]'' 23:53, 25 June 2010 (EDT)
::::::::::::::YAY SUKI!!!!!!!!!!!!!!!!! Oh, and count me in for the limit thing. Any new user who really desires to help will understand. --[[User:Khajidha|Khajidha]] 23:57, 25 June 2010 (EDT)
:::::::::::::::I can live with that idea. --[[User:NCZ|NCZ]] 12:34, 26 June 2010 (EDT)
Now, what can we do about the images our little vandal uploaded that were then reverted? At least the picture he(?) used wasn't something vile, but I don't like having that alias appearing in the histories of the images. --[[User:Khajidha|Khajidha]] 12:32, 26 June 2010 (EDT)
:Yeah, same. Can the most recent revision of an image be deleted along with his spam? We ''did''' revert it, but the image histories are still kind of ugly. --[[User:NCZ|NCZ]] 12:34, 26 June 2010 (EDT)
::It is possible for admins to delete "interim" images from histories, as I've seen them do it before. You'd have to get an admin to actually do so, though. --[[User:Jeysie|Jeysie]] 23:07, 28 June 2010 (EDT)
:::I'm doing it now. It's just a real chore for the sheer volume of images. Take me awhile, but I should be able to.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 23:23, 28 June 2010 (EDT)

So, what to do with the new vandal? Add the name to that black list? --[[User:Lonegamer78|Lonegamer78]] 01:32, 30 June 2010 (EDT)
:Is there ''anything'' we can do to kill this guy? Because I ''do not'' want to see this fucking idiot's crap all over the wiki. --[[User:-Blackout-|-Blackout-]] 03:01, 30 June 2010 (EDT)
::I'm hoping that we could still pull the IP logs, but we'd need our IT folks to be able to do so. --[[User:Lonegamer78|Lonegamer78]] 03:07, 30 June 2010 (EDT)

== Williamfans ==

We have a user named [[Special:Contributions/Williamfans|Williamfans]] who is changing factions for various characters (i.e. giving [[Ultra Magnus (RID)|Ultra Magnus]] a Decepticon faction symbol). I suspect he is an alt of the currently-blocked [[Special:Contributions/William|User:William]], as they both have similar names and are both clear vandals. --[[User:NCZ|NCZ]] 15:44, 18 July 2010 (EDT)
:I'd say that's grounds enough to block the main account permanently. --[[User:-Blackout-|-Blackout-]] 06:09, 19 July 2010 (EDT)

== Spambots ==

Is there a way to prevent people creating pages that have "Talk:/" in their titles? Because these spambots are starting to annoy me. --[[User:-Blackout-|-Blackout-]] 14:09, 21 September 2010 (EDT)
:Is there ''anything'' we can do about these spambots? I count 31 blocked spambots within the past month. --[[User:-Blackout-|-Blackout-]] 04:23, 4 November 2010 (EDT)

== if proxies are blocked, innocent bystanders can be blocked. ==

I have a concern that when proxies are blocked, other people are blocked too. Guess how many people use proxies in the world for good purpouses? For example, 3, Verizon, BT, LGFL, and AOL use proxies! What about the open proxies? Many people use open proxies to be private, to bypass blocks on TFWiki.net or to bypass history recording. Why not make a IP block exempt flag? Please help all the users that want to be private!
:I.....really don't see why anyone would need that flag here. --[[User:-Blackout-|-Blackout-]] 13:02, 3 December 2010 (EST)

== CU ==

Troll guy raised a valid point. Why ''don't'' we use CheckUser? (For the uninitiated, it's a MediaWiki extension which creates an additional usergroup called "CheckUser", which can see people's IPs) I know we have the extension installed because I saw McFly grant the userright to himself some time ago. It would mean we wouldn't have to wait for the IT people to pull the IP logs: <s>Walky could just grant himself or someone else the userright and they would be able to see the IPs.</s> (No need to do that, I just saw that Monzo and Scout have it too --[[User:-Blackout-|-Blackout-]] 04:21, 6 December 2010 (EST))

The small glitch with that is that the CU data expires after some time. (90 days, I think) --[[User:-Blackout-|-Blackout-]] 04:18, 6 December 2010 (EST)

You can find sockpuppets and trace a group of vandals to a IP address/range. It can find evidence for bans and full-scale reports for ISPs to recive. [[User:ArchtransitLightspeed333|TransformersFan133]] 06:54, 18 December 2010 (EST)
:From my experience, ISPs will only accept full-blown server logs such as those produced by Apache (or, in our case, Squid). --[[User:Abates|abates]] 16:14, 18 December 2010 (EST)
::We could still use it to root out and block vandal IPs. --[[User:-Blackout-|-Blackout-]] 04:51, 19 December 2010 (EST)

Wikipedia uses Check User to create ISP complaints, so you could do so.

If CheckUser is used, won't there be a Ombudsman Commission or some variant? Someone needs to know if Checkuser is abused to others's advantage. {{unsigned|ArchtransitLightspeed333}}
:I'm not entirely sure how you could abuse checkuser. --[[User:Abates|abates]] 07:51, 30 June 2011 (EDT)

Pointing it at a user who is innocent. --[[User:Lolclerk5|Lolclerk5]] 06:18, 29 August 2011 (EDT)

== Assaulthead ==

You could do the following:

Modify localsettings.php so that only admins create a account.
Yes, LocalSettings.php.
On the front page, put the email address of '''one''' admin so that people ask for the account instead.
This is to slow down Assaulthead getting the account.
I remember [http://encyc.org Encyc]. It had lots of spam, then they shut registration down so that vandals couldn't spam as much as before.
Also, put a CAPTCHA (eg. "What is the leader of the Autobots? ) on every page creation to slow down vandals.
--Lolclerk

MediaWiki talk:Community Portal/Vandalism

2011-08-29T10:18:03Z

Lolclerk5:

== Our new resident vandal..... ==

Well, it seems that we might have a new resident vandal on our hands.

I suggest we block this guy, ban his IP if he continues, play whack-a-mole with his IPs if he's on a dynamic-IP, and if all else fails, temporarily block all account creation. --[[User:-Blackout-|-Blackout-]] 14:53, 24 August 2009 (EDT)
:He is likely still Assaulthead.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 14:55, 24 August 2009 (EDT)
::Yeah, he does have Assaulthead's rabid obsession with reproduction, although this time he no longer appears to be repressing homosexual urges. I swear he'd be a perv if I thought he was old enough to understand half of this. Still, this is starting to get out of hand. Our policy of "deny recognition" is starting to become "ignoring a problem". There was talk about contacting AT&T or something along those lines to prevent him accessing our site anymore. What happened with that? -- [[User:SFH|SFH]] 14:59, 24 August 2009 (EDT)
:::We need McFly and Scout to pull out the logs, except we haven't heard from either of them in a long while. --[[User:Lonegamer78|Lonegamer78]] 15:05, 24 August 2009 (EDT)
::::Well, he has to run out of proxy servers sometime.....
::::At least, we can limit his choice of user and article names via the title blacklist. --[[User:-Blackout-|-Blackout-]] 15:19, 24 August 2009 (EDT)
::::: *takes another quick look at the RC* I really need to create the remaining SG pages tomorrow. That way, he'll stop messing around with them. --[[User:-Blackout-|-Blackout-]] 15:24, 24 August 2009 (EDT)
::::::I have to admit I keep putting off making the Ark and Nemesis articles because of all the fiction-writeups they'll need... *needs to stop procrastinating and get back into things* --[[User:Jeysie|Jeysie]] 20:10, 24 August 2009 (EDT)

::::Er, on that score, regular backup are still being done, right? Anyone? --[[User:Abates|abates]] 20:46, 24 August 2009 (EDT)
:::::Look who's back.
:::::And guess what: he's decided to confirm our suspicions and reveal that he's Assaulthead. The title of one of the articles he made is a giveaway.
:::::But seriously, can't we just get this guy off our backs for a while by blocking him, putting his user and article names on the title blacklist and temporarily disabling account creation? At least it'll buy us some time while we try and wake up McFly and Scout. --[[User:-Blackout-|-Blackout-]] 12:26, 25 August 2009 (EDT)
::::::PLEASE, SOMEONE KILL THIS GUY ALREADY.
:::::: THANK YOU. --[[User:-Blackout-|-Blackout-]] 12:17, 26 August 2009 (EDT)
:::::::Alright, I need to get this off my chest.
:::::::This guy is seriously disturbed. --[[User:-Blackout-|-Blackout-]] 14:33, 28 August 2009 (EDT)
:We have logs going back two weeks. Anyone want an 80MB gzipped apache log? Any tracking that I've done in the past showed that he was coming from multiple IPs as he's blocked, so the sad fact is, he's NOT running out of proxies. I'd almost propose that we start looking into blocking edits from proxied users. I understand the negative implications, but this isn't exactly a hotbed of political commentary. All that said, the records I have for edits made to articles that were obviously kicked off by him have IPs coming from blocks owned by Bank of America, Best Buy, Level 3 Communications, Verizon, Bell Canada, BellSouth, and AT&T. Some of those might be editors cleaning up the mess from home, some of them might be people catching the issue from work, I don't know. We *could* attempt a banhammer of epic proportions, but I suspect that we're going to take out a lot of innocent bystanders. --[[User:McFly|McFly]] 11:08, 2 September 2009 (EDT)
::As many have suggested, repeatedly, have we considered title/username blacklist? If only to keep the recent changes page a bit less... obscene?--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 11:28, 2 September 2009 (EDT)
:::This. Takes away all his fun. As for blocking proxies.... how common are legitimate anons using proxies? We need to have a grasp on that before we take that step. -- [[User:Repowers|Repowers]] 11:37, 2 September 2009 (EDT)

Just brainstorming ... I don't think my ideas are a good solution exactly, but maybe they'll spark something.
* 1: A waiting period for new accounts - a big turn-off for new users.
* 2: A way to flag certain keywords so that users employing them have their edits shunted into some sort of moderator-approval required place. Pornography, vagina, asshole, etc ... I suspect he'll have less fun if he can't use his naughty words. (Feasibility?)
* 3: A credit-card required for new accounts. Violations result in a fine. (Only kept for, say, a week. Has serious data-security and storage implications and opens us up to potential liability. Also a big turn off)
* 4: Some combination of 1 and 3, with a credit-card as a bypass for the waiting period.
* 5: Some combination of the above and proxy-detection.
--[[User:Jimsorenson|Jimsorenson]] 11:28, 2 September 2009 (EDT)
::I think the credit card ideas (3 and 4) are an absolute-no-no. Restricting account creation would only be worth doing if anonymous editing was disabled, which there's been heavy reluctance to do in the past. Otherwise flagging keywords = yes; restricting ''page creation'' to autoconfirmed users = yes; proxy blocking = maybe, if other measures fail. - [[User:SanityOrMadness|SanityOrMadness]] 16:33, 2 September 2009 (EDT)

:''flag certain keywords''
:That sounds like the simplest solution, to my admittedly layman ears. Make it impossible to create an account or a new page that includes "Detour" or any of the usual dirty words. --[[User:Thylacine 2000|Thylacine 2000]] 12:05, 2 September 2009 (EDT)
::As stated above, if the title/username blacklist extension is installed, which is a very common one for MediaWiki, we can do exactly that. It has full wildcard functionality. I know some users have argued that the obscene titles and usernames are what make Assaulthead easy to spot, but I tend to disagree. The sheer ''volume'' of edits when an Assaulthead sock pops in make him easy to spot regardless of what username he's chosen or what his article titles are.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 12:47, 2 September 2009 (EDT)

:::2 and 5 seem to be good. The credit-card idea seems to be not ideal, since the card number could be fake or using other's card. --'''[[User:TX55|TX55]]'''''[[User talk:TX55|TALK]]'' 12:51, 2 September 2009 (EDT)
::::Hmmm ... what about we slow down new page creation and/or edits for new users only? Once every couple of minutes for your first week might be good. (Suggestion 6) --[[User:Jimsorenson|Jimsorenson]] 13:09, 2 September 2009 (EDT)
:::::Install the title/username blacklist extension, and flag certain keywords.
:::::If all else fails, nuke all proxies. --[[User:-Blackout-|-Blackout-]] 14:10, 2 September 2009 (EDT)
::::::Yeah, and I'd also support restricting page creation and file upload to the "autoconfirmed" group (that is, users who have been registered for X days and made Y edits), the same way page moves are already restricted. - [[User:SanityOrMadness|SanityOrMadness]] 16:33, 2 September 2009 (EDT)
:::::::That's a good idea. It's VERY rare that a first-time editor starts off by making a new page that actually belongs here. -- [[User:Repowers|Repowers]] 16:52, 2 September 2009 (EDT)
:::::::I agree wholeheartedly with restricting page creation for new users. Also, there's very words that we'd want to ban that would be in legit article titles (a new character named Detour, maybe), so a mod could create those pages if needed. But I honestly thought such restrictions would be impossible, otherwise they'd have been put in effect ages ago. - [[User:Cattleprod|Cattleprod]] 13:19, 3 September 2009 (EDT)

My own thoughts:

I agree that having creating new pages and uploading files be restricted to autoconfirmed accounts is a good idea. New editors should really be encouraged to make smaller edits and read up on image policies before tackling new articles and uploading files anyway, and any anon editor who's been around doing minor edits for a long while before getting an account is probably familiar enough with the goings-on around here to understand the wait.

I also agree that banning proxies is also a good idea. As has been said, this isn't a political site, so there's really no legitimate reason I can think of that someone should have to hide their true IP to edit here. Plus we can always possibly make a note someplace saying that if someone does actually have a legitimate reason to be behind a proxy, they can contact someone here to make an account and exception for them to use.

It might also be a good idea to require e-mail activation for new accounts. It's not that big a hassle for legitimate users, and it means that we at least have a confirmed e-mail address for any trolls (provided we disallow the "throw-away" types of e-mail domains from being used for that purpose).

Those are some lockdowns I think would minimally affect real new users, but would make it harder for trolls to sign up just to cause trouble. Especially if we install the New User log via extension or upgrade, to keep tabs on new usernames. (And we can even put any needed explanations on the lockdowns into a [[User:Jeysie/NewUser|New User Greeting]]. ;) ) --[[User:Jeysie|Jeysie]] 20:15, 2 September 2009 (EDT)

:Turning the setting on to require a confirmed email address means that you can no longer edit anonymously (anonymous editors don't have an email address). I just tried it on my test copy of MediaWiki. --[[User:Abates|abates]] 20:38, 2 September 2009 (EDT)
::There's no setting to require e-mail activation for new accounts, but ''not'' require e-mail addresses for editing in general? Well, that's the most utterly dumb thing I've ever heard. What were the Wiki software people thinking? --[[User:Jeysie|Jeysie]] 20:47, 2 September 2009 (EDT)
:::Actually, it makes perfect sense. If you want an e-mail address for your users, then you don't want the option of them editing WITHOUT an e-mail address. Otherwise, you're neither fish nor fowl. - [[User:SanityOrMadness|SanityOrMadness]] 21:25, 2 September 2009 (EDT)
::::I don't see how it makes sense at all. I can think of plenty of instances where I'd be OK with guest posting, yet still want to make sure that named accounts are real people. After all, guest accounts often draw scrutiny and have to deal with extra measures like spam filters, but posting under a named account often tends to confer a bit more trust. Especially in cases like us, where with 900+ users, it's not like you can instantly tell if a given user is new or not unless they happen to be one of the regulars, but seeing an anon IP is an instant indicator to watch the edit more closely. --[[User:Jeysie|Jeysie]] 21:35, 2 September 2009 (EDT)

:I'd be opposed to requiring a "non-throwaway" e-mail address for an account, since not everyone HAS one (or, at least, one they can use, since employers frown muchly on the use of work e-mail addresses for such things). After the credit card thing, that's the thing most likely to turn off legit editors. - [[User:SanityOrMadness|SanityOrMadness]] 21:25, 2 September 2009 (EDT)
::I don't mean throwaway in terms of Hotmail or GMail or what have you... pretty much everyone online is going to have at least one e-mail address they use for personal correspondence, even if it's webmail. I'm talking those temporary e-mail services like Mailinator where you can create an e-mail without registering just to answer the notification, then never use it again. If we let people use those, then requiring registration would be pointless anyway. --[[User:Jeysie|Jeysie]] 21:35, 2 September 2009 (EDT)
:::Guess who's back.
:::Can someone block him, delete his articles and actually create them? --[[User:-Blackout-|-Blackout-]] 12:11, 3 September 2009 (EDT)
::::Just out of curiosity, would it be possible to disable account creation for a while? --[[User:-Blackout-|-Blackout-]] 14:35, 3 September 2009 (EDT)
:::::I think that'd only be a stopgap, as he could easily just start spamming with "new articles" as an anon. --[[User:Lonegamer78|Lonegamer78]] 14:48, 3 September 2009 (EDT)

At present, what I'm in favor of:
*Throttling edits-per-minute down for anons and new accounts.
*Installing and implementing title blacklist for a select few words that are ''extremely'' unlikely to ever be used as legitimate article titles.
I think if we try these two on for size, we likely won't need more drastic measures.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 15:08, 3 September 2009 (EDT)
:Extremely doesn't cut it. The words would be "never ever going to be".
:On an unrelated note, this discussion has to be moved to its own page. It's becoming [[Galvatron (G1)|insanely]] [[Scale|long]]. --[[User:-Blackout-|-Blackout-]] 15:39, 3 September 2009 (EDT)

== Options, then... ==

# Install the [http://www.mediawiki.org/wiki/Extension:Title_Blacklist title blacklist] extension (now incorporating username blacklist, apparently), and add all the obscene terms you can think of to it. And Detour. A mitigation rather than solution, but one I think is pretty vital.
# Restrict page creation and file upload (if the latter isn't restricted already) to the "autoconfirmed" group, as with page moves, preventing anons and users with less than X edits, or who have been registered for less than Y days (I think X=50 and Y=4, but I'm not 100% sure about that) from doing so. A low-disruption option, and would also make vandalism harder.
# Throttle edits-per-minute for non-"autoconfirmed" users. Does this exist as an option?
# More anti-vandalism extensions: [http://www.mediawiki.org/wiki/Extension:AntiSpoof AntiSpoof] (prevent users from creating "confusable" nicks), [http://www.mediawiki.org/wiki/Extension:AbuseFilter AbuseFilter] (req. AntiSpoof)
# Block all proxies. This could cause problems with certain ISPs, apparently, and is something I think we should hold in reserve.
# Require e-mail confirmation. I don't see that this would help much with you-know-who unless you required an '''ISP''' e-mail. And that would prevent a bunch of legitimate users from registering. You'd also have to disable anonymous editing (even if a workaround could be found to allow anons while requiring an e-mail to get an account, you-know-who would simply stop registering).
I leave off the credit card idea quite deliberately.

Thoughts? - [[User:SanityOrMadness|SanityOrMadness]] 18:45, 3 September 2009 (EDT)
:I think blocking anonymous proxies should be our main action, whatever else we do... that will force him to use his real IP if he wants to try something, which means we'd be able to contact his real ISP. I fail to see why any legitimate ISP would need to have its members use an anonymous/open-to-all proxy, and there's no reason an individual would need to hide their IP to make legitimate edits here, so I can't imagine anonymous proxy blocking having much of an effect on legitimate users.
:I also think restricting page creation and file uploading would be the biggest help as well. Although admittedly that would mean having to patrol real articles for vandalism more closely. --[[User:Jeysie|Jeysie]] 18:57, 3 September 2009 (EDT)
::I don't think you can distinguish between open proxies and other proxies, except by checking the IP address against known open proxies. That is, if you block proxies, you block people editing from work, and from ISPs like AOL. - [[User:SanityOrMadness|SanityOrMadness]] 19:24, 3 September 2009 (EDT
:::Which is why ideally, I'd say we do the least intrusive of these first, and work our way up if it proves to not be enough. As for throttling anon and new edits, doesn't Wikipedia already do this?--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 19:28, 3 September 2009 (EDT)
::::[http://meta.wikimedia.org/wiki/Proxy_blocking This page] would seem to suggest that the proxy blocking only blocks open proxies, not ISP-based ones, so I still don't see why it would be a problem. --[[User:Jeysie|Jeysie]] 19:32, 3 September 2009 (EDT)
:::::Take a look at the [[wikipedia:meta:Proxy blocking#technical problems|#technical problems]] section ''on that very page''. - [[User:SanityOrMadness|SanityOrMadness]] 19:59, 3 September 2009 (EDT)
::::::Well, TBH, if we can't implement that, then I don't see the other options stopping him at all; merely changing the form his vandalism will take. Whereas forcing him to use his real IP either would make him either stop rather than reveal himself, or will give us ammunition to take to his ISP. --[[User:Jeysie|Jeysie]] 20:05, 3 September 2009 (EDT)

:Looks good, although 5 and 6 should probably be left out of the 'first wave' of implementation, it could cause a lot of headaches for legit users. I honestly thought 1 and 2 were impossible, since I can think of no logical reason for them not to already be in effect. - [[User:Cattleprod|Cattleprod]] 18:58, 3 September 2009 (EDT)

:Re item 3 - it's unlikely to have much of an effect on YKW because he only makes one or two edits a minute anyway. --[[User:Abates|abates]] 19:52, 3 September 2009 (EDT)
::Who's YKW? --[[User:-Blackout-|-Blackout-]] 10:56, 4 September 2009 (EDT)
:::"You-Know-Who". --[[User:Detour|Detour]] 18:15, 4 September 2009 (EDT)

===When?===
http://www.mediawiki.org/wiki/Manual:User_rights

Yes, it requires access to LocalSettings.php, and so McFly or Scout will have to do it, but

$wgGroupPermissions['autoconfirmed']['createpage'] = true;
$wgGroupPermissions['autoconfirmed']['upload'] = true;
$wgGroupPermissions['autoconfirmed']['reupload'] = true;
$wgGroupPermissions['autoconfirmed']['reupload-shared'] = true;

...should all be added forthwith, yes? - [[User:SanityOrMadness|SanityOrMadness]] 23:30, 13 September 2009 (EDT)

:If it means cutting down on seeing that junk on the Recent Changes page, HELL YES.
:EDIT: A bit hasty on my response, but it could be an alternative or a secondary level next to blacklisting the words. --[[User:Lonegamer78|Lonegamer78]] 00:01, 14 September 2009 (EDT)

::Oh, blacklisting the obvious words is doable via LocalSettings.php too (or by extensions, or a combination). I forget how offhand, though. - [[User:SanityOrMadness|SanityOrMadness]] 01:04, 14 September 2009 (EDT)

== Something semi-related... ==

If the title blacklist extension was installed, page names ending in "/" could be blocked. Spambots appear to be showing an increasing preference for those. - [[User:SanityOrMadness|SanityOrMadness]] 18:08, 4 September 2009 (EDT)
:Really? Those must be popping up when I'm off-line, because I never see any of those on the RC. --[[User:-Blackout-|-Blackout-]] 02:52, 5 September 2009 (EDT)

== Not another one..... ==

Lord Voldemort (read: Assaulthead) has returned.

Also, on a somewhat related note, correct me if I'm wrong, but wasn't "deny recognition" imposed on us by Wikia in the first place? --[[User:-Blackout-|-Blackout-]] 13:32, 10 September 2009 (EDT)
:Not imposed so much as we adopted it because it was a good idea. It's a Wikipedia policy, not a Wikia policy.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 13:56, 10 September 2009 (EDT)
::Exactly. WAS a good idea. Now it's turned into "ignore a problem at all cost". --[[User:-Blackout-|-Blackout-]] 14:02, 10 September 2009 (EDT)
:::It ''was'' ignore the problem. Now we're addressing it. Granted, I'd prefer to be taking more action, but we have options and we're discussing them. -- [[User:SFH|SFH]] 15:18, 10 September 2009 (EDT)
::::The six we have should do the trick. We do the main five first, and then if all else fails, we nuke all proxies. --[[User:-Blackout-|-Blackout-]] 12:56, 11 September 2009 (EDT)

== Is there a sysop in the house ==

[[User:Assmaster]] needs dealt with. - [[User:SanityOrMadness|SanityOrMadness]] 15:03, 12 September 2009 (EDT)
:[[Image:GuessIronhidesEmotion.jpg|left|200px|thumb|WOW. WHAT A SURPRISE.]] --[[User:-Blackout-|-Blackout-]] 15:26, 12 September 2009 (EDT)

== Could he finally be gone? Nah..... ==

Three days and no Recent Changes flooded with swear words and parts of the female anatomy YKW has never seen.

Just out of curiosity, has someone put together some actual defences yet, or is YKW just trying to think up some new article titles before he starts spamming up the RC again? --[[User:-Blackout-|-Blackout-]] 08:57, 16 September 2009 (EDT)

:::I don't see him yet.....could the message have finally reached as far as the brain he keeps in a jar beneath his bed? --[[User:-Blackout-|-Blackout-]] 12:06, 22 September 2009 (EDT)

== New vandalism ==

I'm going to assume that none of the admins are on right now, but we have a mild situation. -- [[User:SFH|SFH]] 21:34, 25 June 2010 (EDT)
:Yeah, I remember, something like this happened on another wiki I went to. But since we're presently the only real users online, I believe, all we can do is mark the pages he makes and wait. --[[User:NCZ|NCZ]] 21:36, 25 June 2010 (EDT)
::Ugh. Why do all the admins have to be offline ''now?'' --[[User:NCZ|NCZ]] 21:56, 25 June 2010 (EDT)
:::Probably all partying at BotCon. Lucky bastards. --[[User:Khajidha|Khajidha]] 22:05, 25 June 2010 (EDT)
::::That's what I thought. At least you're here, Khajidha; at least with more users we can do what we can faster. --[[User:NCZ|NCZ]] 22:09, 25 June 2010 (EDT)
:::::(sigh) Hopefully sooner or later the guy will realize he should actually find himself a real life. And that everything he's doing can be undone in about two clicks. --[[User:Jeysie|Jeysie]] 23:17, 25 June 2010 (EDT)
::::::Indeed. He's been at it for ''two. HOURS.'' Anyway, we really need to do something so stuff like this doesn't happen again. --[[User:NCZ|NCZ]] 23:20, 25 June 2010 (EDT)
:::::::Oh thank heavens, it's Suki!
:::::::And, weren't we going to implement blocking anons and new users from uploading pics or creating new pages? --[[User:Jeysie|Jeysie]] 23:24, 25 June 2010 (EDT)
::::::::SUKI, WE LOVE YA! <3
::::::::But yeah, I hope we get to implement that new policy soon. --[[User:Lonegamer78|Lonegamer78]] 23:25, 25 June 2010 (EDT)
:::::::::ThankyouthankyouTHANKYOUSUKIBRITS. I'm personally a tad skeptical on the idea, since some new users do have good starts (cough, such as myself, cough cough), but I'm still completely against vandalism. --[[User:NCZ|NCZ]] 23:28, 25 June 2010 (EDT)
::::::::::Newbies limited to a certain number of uploads in a 24-hour period for two months before being released to upload as many as they please (within limits, of course)? --[[User:Lonegamer78|Lonegamer78]] 23:35, 25 June 2010 (EDT)
:::::::::::A new legitimate user might show up with plenty of needed images. A limit's good, as long as when they reach the limit the error message gives clear instructions about how to ask for permission to upload more stuff. - [[User:Cattleprod|Cattleprod]] 23:46, 25 June 2010 (EDT)
::::::::::::Well, it doesn't take long to become a non-new user by wiki software standards, so I'd think a real new user would be willing to be patient, if we limit uploading and new pages to Autoconfirmed. And if we install something that keeps track of new users we can watch for any patient vandals. --[[User:Jeysie|Jeysie]] 23:48, 25 June 2010 (EDT)
:::::::::::::NICE WORK SUKI!! Now the recent changes (for (main)) is clean.
:::::::::::::And I vote for the limit method. --'''[[User:TX55|TX55]]'''''[[User talk:TX55|TALK]]'' 23:53, 25 June 2010 (EDT)
::::::::::::::YAY SUKI!!!!!!!!!!!!!!!!! Oh, and count me in for the limit thing. Any new user who really desires to help will understand. --[[User:Khajidha|Khajidha]] 23:57, 25 June 2010 (EDT)
:::::::::::::::I can live with that idea. --[[User:NCZ|NCZ]] 12:34, 26 June 2010 (EDT)
Now, what can we do about the images our little vandal uploaded that were then reverted? At least the picture he(?) used wasn't something vile, but I don't like having that alias appearing in the histories of the images. --[[User:Khajidha|Khajidha]] 12:32, 26 June 2010 (EDT)
:Yeah, same. Can the most recent revision of an image be deleted along with his spam? We ''did''' revert it, but the image histories are still kind of ugly. --[[User:NCZ|NCZ]] 12:34, 26 June 2010 (EDT)
::It is possible for admins to delete "interim" images from histories, as I've seen them do it before. You'd have to get an admin to actually do so, though. --[[User:Jeysie|Jeysie]] 23:07, 28 June 2010 (EDT)
:::I'm doing it now. It's just a real chore for the sheer volume of images. Take me awhile, but I should be able to.--[[User:Rosicrucian|Rosicrucian]][[User Talk:Rosicrucian|Talk]] 23:23, 28 June 2010 (EDT)

So, what to do with the new vandal? Add the name to that black list? --[[User:Lonegamer78|Lonegamer78]] 01:32, 30 June 2010 (EDT)
:Is there ''anything'' we can do to kill this guy? Because I ''do not'' want to see this fucking idiot's crap all over the wiki. --[[User:-Blackout-|-Blackout-]] 03:01, 30 June 2010 (EDT)
::I'm hoping that we could still pull the IP logs, but we'd need our IT folks to be able to do so. --[[User:Lonegamer78|Lonegamer78]] 03:07, 30 June 2010 (EDT)

== Williamfans ==

We have a user named [[Special:Contributions/Williamfans|Williamfans]] who is changing factions for various characters (i.e. giving [[Ultra Magnus (RID)|Ultra Magnus]] a Decepticon faction symbol). I suspect he is an alt of the currently-blocked [[Special:Contributions/William|User:William]], as they both have similar names and are both clear vandals. --[[User:NCZ|NCZ]] 15:44, 18 July 2010 (EDT)
:I'd say that's grounds enough to block the main account permanently. --[[User:-Blackout-|-Blackout-]] 06:09, 19 July 2010 (EDT)

== Spambots ==

Is there a way to prevent people creating pages that have "Talk:/" in their titles? Because these spambots are starting to annoy me. --[[User:-Blackout-|-Blackout-]] 14:09, 21 September 2010 (EDT)
:Is there ''anything'' we can do about these spambots? I count 31 blocked spambots within the past month. --[[User:-Blackout-|-Blackout-]] 04:23, 4 November 2010 (EDT)

== if proxies are blocked, innocent bystanders can be blocked. ==

I have a concern that when proxies are blocked, other people are blocked too. Guess how many people use proxies in the world for good purpouses? For example, 3, Verizon, BT, LGFL, and AOL use proxies! What about the open proxies? Many people use open proxies to be private, to bypass blocks on TFWiki.net or to bypass history recording. Why not make a IP block exempt flag? Please help all the users that want to be private!
:I.....really don't see why anyone would need that flag here. --[[User:-Blackout-|-Blackout-]] 13:02, 3 December 2010 (EST)

== CU ==

Troll guy raised a valid point. Why ''don't'' we use CheckUser? (For the uninitiated, it's a MediaWiki extension which creates an additional usergroup called "CheckUser", which can see people's IPs) I know we have the extension installed because I saw McFly grant the userright to himself some time ago. It would mean we wouldn't have to wait for the IT people to pull the IP logs: <s>Walky could just grant himself or someone else the userright and they would be able to see the IPs.</s> (No need to do that, I just saw that Monzo and Scout have it too --[[User:-Blackout-|-Blackout-]] 04:21, 6 December 2010 (EST))

The small glitch with that is that the CU data expires after some time. (90 days, I think) --[[User:-Blackout-|-Blackout-]] 04:18, 6 December 2010 (EST)

You can find sockpuppets and trace a group of vandals to a IP address/range. It can find evidence for bans and full-scale reports for ISPs to recive. [[User:ArchtransitLightspeed333|TransformersFan133]] 06:54, 18 December 2010 (EST)
:From my experience, ISPs will only accept full-blown server logs such as those produced by Apache (or, in our case, Squid). --[[User:Abates|abates]] 16:14, 18 December 2010 (EST)
::We could still use it to root out and block vandal IPs. --[[User:-Blackout-|-Blackout-]] 04:51, 19 December 2010 (EST)

Wikipedia uses Check User to create ISP complaints, so you could do so.

If CheckUser is used, won't there be a Ombudsman Commission or some variant? Someone needs to know if Checkuser is abused to others's advantage. {{unsigned|ArchtransitLightspeed333}}
:I'm not entirely sure how you could abuse checkuser. --[[User:Abates|abates]] 07:51, 30 June 2011 (EDT)

Pointing it at a user who is innocent. --[[User:Lolclerk5|Lolclerk5]] 06:18, 29 August 2011 (EDT)

User talk:Lolclerk5

2011-08-29T10:14:02Z

Lolclerk5: New page: ==Archived talk page== Hi, it's not necessary to make categories for sockpuppets and the like. Also, several times now when editing you'd removed huge chunks of articles. Please be more c...

User:Lolclerk5

2011-08-29T10:04:15Z

Lolclerk5:

I am [[User:ArchtransitLightspeed333]], but I lost my password.

I have put a copy of the old page below:

==Old page==

{{factions|autobot|autobotg2}}
{{disambig3|Lightspeed}}
:''Lightspeed is an [[Autobot]] [[Technobot (G1)|Technobot]] from the [[Generation 1 continuity family]].''
[[Image:TechnobotLightspeed MTMTE.jpg|right|300px|thumb|I'm not the man they think I am at home. Oh no no no, I'm a Rocket man!]]
Looking in from the outside, you'd think '''Lightspeed''' had it all: He's highly intelligent, strong, fast, and considered dashingly good-looking by Transformers standards. And if any of that mattered to him at all, he'd be golden. Sadly, Lightspeed aches down to the core of his being for something more. His heart yearns to escape the bonds of gravity and fly free. Dreams of soaring between the stars and exploring the vast mysteries of space consume him, making him feel slow, trapped, and dissatisfied with what others would see as a charmed existence. Lightspeed would gladly pursue his dream of being rebuilt as an interstellar spacecraft if the Autobots' situation wasn't so grim. As it is, he knows the necessary resources are more valuable elsewhere and so puts his energy into winning the war and making his dream a possibility. His dreams tend to distract him from his current function as a data processor. He combines with his fellow Technobots to form [[Computron (G1)|Computron]].

Lightspeed is allergic to [[Energon (fuel)|energon]] (and most other fuels to a lesser extent) and must take a special lead sulfide additive when fueling or he experiences severe engine knocking and a bad [[rust rash]].

{{quote|Daydreaming, Strafe. Or maybe I should say stardreaming. I've been waiting for this chance to explore space, but since leaving Cybertron, the only stars I've seen are in the sky over Autobot City. The stars, the planets, the thousand moons... like jewels in an alien crown.|Lightspeed waxes poetical|"[[Money Is Everything]]"}}

:''French-Canadian name'': '''Luméclair'''
:''Italian name'': '''Starbot'''

==Fiction==
===Marvel Comics continuity===
{{noteukonly}}
Lightspeed and his fellow Technobots were part of [[Fortress Maximus (G1)|Fortress Maximus]]'s crew on the ''[[Steelhaven]]''. When Fortress Maximus decided to leave the war on [[Cybertron (planet)|Cybertron]] and head to [[Nebulos]], Lightspeed and the other Technobots agreed to follow him on his quest for peace. {{storylink|Ring of Hate!}} However, the Decepticons followed the Autobots to Nebulos and brought the war with them. {{storylink|Broken Glass!}}

In the Nebulos resort city of [[Splendora]], Lightspeed and the Technobots fought [[Abominus (G1)|Abominus]] as the combined [[Computron (G1)|Computron]]. Though Abominus was defeated and routed, Splendora lay in ruins. {{storylink|Love and Steel!}} The Autobots and Decepticons ultimately left Nebulos for [[Earth]].

After [[Starscream (G1)|Starscream]] was mutated by his short exposure to the [[Underbase]], he obliterated all of the Technobots, including Lightspeed, in [[Buenos Aires]]. {{storylink|Dark Star (issue)|Dark Star}}

====Marvel UK future timelines====
''In the year 2510, Lightspeed and the Technobots had apparently fallen into a close alliance with [[Ultra Magnus (G1)|Ultra Magnus]]. When [[Hot Rod (G1)|Rodimus Prime]] announced the last Decepticon was dead and the war was therefore over, the Technobots attended the meeting at Magnus's side. Unfortunately, so did a Decepticon deep-cover operative named [[Triton]]. When Rodimus Prime decided to step down as Autobot leader and named [[Springer (G1)|Springer]] as his intended replacement, Triton saw his chance for treachery. He jumped into the conversation, saying Ultra Magnus was a far better choice to carry the [[Matrix of Leadership|Matrix]]—he had done so in the past and was more of a statesman than a warrior like Springer, and so better suited to lead in peacetime. Lightspeed quickly responded to Triton's logic, and the room divided between Technobots and [[Wrecker|Wreckers]]. After [[Scattershot (G1)|Scattershot]] killed the Wrecker named [[Roadbuster (G1)|Roadbuster]] and [[Sandstorm (G1)|Sandstorm]] killed Triton in turn, war tragically broke out again on Cybertron. {{storylink|Peace}}''

===American cartoon continuity===
:''Voice actor:'' [[Danny Mann]] (English), [[Takurō Kitagawa]] (Japanese)

Lightspeed was created along with the other Technobots by [[Grimlock (G1)|Grimlock]] when the latter gained super intelligence. Viewing [[Afterburner (G1)|Afterburner]]'s excited mannerisms, he advised Afterburner to "mellow out". Good luck with that, Lightspeed. {{storylink|Grimlock's New Brain}}

In 2007, Lightspeed and the Technobots arrived at [[Mark Morgan]]'s laboratory to stop the Terrorcons from stealing Morgan's [[Impervious Alloy|heat-and-radiation-resistant alloy]]. Unfortunately the subsequent battle between Computron and [[Abominus (G1)|Abominus]] caused much damage to Morgan's lab, injuring [[Jessica Morgan|his daughter]] and leading to the [[Hate Plague]] crisis. {{storylink|The Return of Optimus Prime, Part 1}} Shortly after Optimus Prime's return, Lightspeed was briefly involved with the battle for [[Autobot City]] that inadvertently led to the discovery of Nebulos. Lightspeed was hypnotized by [[Mindwipe (G1)|Mindwipe]] into backing over a cliff, and he shook his head dazedly after he hit the ground. {{storylink|The Rebirth, Part 1}}

===Japanese cartoon continuity===
====''The Great Transformer War'' manga====

Lightspeed and his Technobot comrades were under construction at [[Metroplex (G1)|Metroplex]] when the Autobots sought the aid of Doctor [[Dalton (G1)|Dalton]] in improving their abilities. {{storylink|The Great Transformer War issue 1}} Dalton heavily upgraded the Technobots' weaponry, allowing the combined Computron to easily outmatch the Decepticon combiner, Abominus. As the Decepticon motto goes, however: When in doubt, cheat. Galvatron outfitted the Terrorcons with "[[control liquid]]", a substance that enabled them to assume control over Computron. Dalton arranged for [[Spike Witwicky (G1)|Spike Witwicky]] to use a special [[exo-suit]] to approach Computron safely and administer an antidote. {{storylink|The Great Transformer War issue 2}}

====''The Headmasters'' cartoon====
:''Voice actor:'' [[Masashi Ebara]] (Japanese)

In 2011, Galvatron staged a major attack on Cybertron. Lightspeed and the Technobots joined the Dinobots on the front lines of defense. {{storylink|Four Warriors Come out of the Sky}} As [[Hot Rod (G1)|Hot Rod]] began his search for the [[Matrix of Leadership]] on Earth, [[Ultra Magnus (G1)|Ultra Magnus]] gathered Lightspeed and the Technobots to prevent the Decepticons from hampering his quest. When Hot Rod finally located the Matrix, [[Galvatron (G1)|Galvatron]] confronted him with the Decepticon [[Headmaster (technology)|Headmaster]]s and Terrorcons, but the Technobots arrived to help even the odds. Scattershot ordered them to form Computron, and the mighty giant occupied the Decepticons so that Hot Rod could make a break for the [[space bridge]]. {{storylink|Birth of the Fantastic Double Prime}}

Later, Galvatron launched [[Metamorpho]], a gravity-twisting meteorite, and the [[Aerialbot (G1)|Aerialbot]]s were its first victims. Lightspeed and the Technobots were sent out to recover their damaged comrades for repairs, but they were intercepted by the Terrorcons. The fighting escalated with new arrivals on both sides, as the Decepticons tried to keep their foes occupied until the meteorite reached [[Athenia]], destroying the Autobots completely. The [[Fortress Maximus (G1)|Battleship Maximus]] eventually arrived to carry the Headmasters into space to confront the meteorite, and so Lightspeed and the Technobots formed Computron and covered their retreat. {{storylink|Approach of the Demon Meteorite}}

When a giant carnivorous plant took root in [[San Francisco]], Ultra Magnus sent Lightspeed and the Technobots to deal with the incident. The plant proved to be extraordinarily resilient, however, and it was also guarded by the Decepticons. The Technobots were distracted by combat with the [[Stunticon (G1)|Stunticons]], first as individuals and later combined as Computron and [[Menasor (G1)|Menasor]]. {{storylink|Head On!! Fortress Maximus}}

I want to revert vandalism.

User:Lolclerk5

2011-08-29T10:03:32Z

Lolclerk5:

I am [[User:ArchtransitLightspeed333]], but I lost my password.

I have put a copy of the old page below:

User:Lolclerk5

2011-08-29T10:02:16Z

Lolclerk5: New page: I am Arch TransitLightspeed333, but I lost my password.

I am Arch TransitLightspeed333, but I lost my password.