OLPC talk:Vandalism: Difference between revisions
(80 intermediate revisions by 43 users not shown) | |||
Line 1: | Line 1: | ||
{{TOCright}} |
|||
==Article updated via HTTP request== |
|||
See [[Special:RecentChanges]] for new pages hanging off of [[Summer of Content mentors]]. |
|||
Ideas for defense? --[[User:FGrose|FGrose]] 17:59, 4 July 2009 (UTC) |
|||
: Notice, for example, that [[Special:Contributions/209.172.33.230]] created pages despite being [http://wiki.laptop.org/index.php?title=Special:Log&type=block&page=User:209.172.33.230 blocked]. |
|||
I think we need "prevent page creation" options. [[User:Cjl|cjl]] 02:50, 7 July 2009 (UTC) |
|||
== XO Korea == |
== XO Korea == |
||
Line 37: | Line 44: | ||
*Another questionable one {{user|80.234.10.86}} |
*Another questionable one {{user|80.234.10.86}} |
||
: Google translate implies it's Russian domain registration spam. Blocked and deleted. —[[User:Leejc|Joe]] 23:53, 27 May 2008 (EDT) |
|||
== nonsense added == |
== nonsense added == |
||
Line 61: | Line 69: | ||
* {{user|87.236.233.52}} (blocked by FFM) |
* {{user|87.236.233.52}} (blocked by FFM) |
||
* {{user|202.120.139.211}} (blocked by FFM) |
* {{user|202.120.139.211}} (blocked by FFM) |
||
* {{user|78.129.208.145}} |
* {{user|78.129.208.145}} (blocked by Leejc) |
||
== Simply in need of guidance? == |
== Simply in need of guidance? == |
||
Line 76: | Line 84: | ||
* {{user|207.210.68.2}} (blocked) |
* {{user|207.210.68.2}} (blocked) |
||
* {{user|87.118.104.145}} (see contribs, pattern) (blocked) |
* {{user|87.118.104.145}} (see contribs, pattern) (blocked) |
||
* {{user|87.248.173.155}} |
* {{user|87.248.173.155}} (blocked) |
||
''Note: For these index.php offenders, the only change they make is the creation of the page. If you delete the page, please also block the user, ideally with a link to the page as the block reason. Otherwise it is hard for others to find the reason to block the user, because deleted pages no longer show up on their contribution history.'' |
|||
== Link spam == |
== Link spam == |
||
Line 117: | Line 127: | ||
== one-character vandals? == |
== one-character vandals? == |
||
I caught a one-character typo vandal today, which reminded me a bit like a few other odd minor vandalism edits. I wonder if there are people sporadically testing this (and perhaps other popular) wikis, as a simpler version of the random-string spammers.. --[[User:Sj|Sj]] [[User talk:Sj|<font style="color:#f70; font-size:70%">talk</font>]] 10:16, 24 April 2008 (EDT) |
I caught a one-character typo vandal today, which reminded me a bit like a few other odd minor vandalism edits. I wonder if there are people sporadically testing this (and perhaps other popular) wikis, as a simpler version of the random-string spammers.. --[[User:Sj|Sj]] [[User talk:Sj|<font style="color:#f70; font-size:70%">talk</font>]] 10:16, 24 April 2008 (EDT) |
||
: I've done some analysis of the block logs and linked it from a stub page [[OLPC:Bot_Interest_Group]]. I think some of these are very possibly simple errors by new eidtors, but some definitely have the characteristic signs of being "probes" by vandals, see [[OLPC:Bot_Interest_Group/Tracking#Observation_4:]]. Matching up the patterns is inexact and so in most cases it is hard to say. [[User:Cjl|cjl]] 15:39, 12 August 2008 (UTC) |
|||
== user template == |
== user template == |
||
Line 127: | Line 138: | ||
:: OK, it should be locked to unregistered users now. Thanks —[[User:Leejc|Joe]] 22:29, 13 May 2008 (EDT) |
:: OK, it should be locked to unregistered users now. Thanks —[[User:Leejc|Joe]] 22:29, 13 May 2008 (EDT) |
||
:Thanks, I really believe semi-protection is merited in this case. It will be interesting to see if the bot moves to another page :-( [[User:Cjl|Cjl]] 23:08, 13 May 2008 (EDT) |
:Thanks, I really believe semi-protection is merited in this case. It will be interesting to see if the bot moves to another page :-( [[User:Cjl|Cjl]] 23:08, 13 May 2008 (EDT) |
||
== URGENT need for anti-vandalism bot == |
|||
The wiki vandalism is getting out of control. I see (what are to me at least) clear signs of increasing sophistication in the automation of the attacks. I can't beat the bot at it's own game, OLPC needs a counterbot, NOW. [[User:Cjl|Cjl]] 19:33, 12 July 2008 (UTC) |
|||
:Feel free to set up cluebot. '''[[User:Firefoxman|ff]]<font color="darkgreen">[[User talk:Firefoxman|m]]</font>''' 04:34, 13 July 2008 (UTC) |
|||
::ffm, This is simply not a helpful reply, I find it rather disappointing. You should try to be more thoughtful in responding, this is a serious problem and requires a serious answer, not a flippant "DIY" [[User:Cjl|Cjl]] 05:08, 13 July 2008 (UTC) |
|||
:::SJ is going to be gone for some time. If you do the documentation/research I can get any additional passwords we need from Henry whilst he is away(if he indeed can not be reached) [[User:Sethwoodworth|Seth]] 09:30, 13 July 2008 (UTC) |
|||
== Vandalizing the vandalism page == |
|||
I just undid edits by 79.68.53.182 -- deleted all content on the page and the discussion. I presume this was not a sanctioned action. -- [[User:Davewa|Davewa]] 21:41, 22 January 2009 (UTC) |
|||
:Thanks Dave, that IP has now been blocked. [[User:Cjl|cjl]] 23:44, 22 January 2009 (UTC) |
Latest revision as of 04:38, 30 March 2012
Article updated via HTTP request
See Special:RecentChanges for new pages hanging off of Summer of Content mentors. Ideas for defense? --FGrose 17:59, 4 July 2009 (UTC)
- Notice, for example, that Special:Contributions/209.172.33.230 created pages despite being blocked.
I think we need "prevent page creation" options. cjl 02:50, 7 July 2009 (UTC)
XO Korea
What's up with XO Korea/business content and its many subpages? 19:01, 8 April 2008 (EDT)
- This was all contributed by one of our great early contributors... it has definite utility, it just is an unfinished project... I think it's okay where it is (aside from the way it overweights use of the special:random page :) --Sj talk 10:19, 24 April 2008 (EDT)
Question
Here's an edit I just reverted by user 202.28.27.4. It was particularly egregious in that co-opted a redirect to the Main page.
Would such observations be best posted to OLPC_talk:Administrators or here? I also posted this to Leejc because I've seen that he takes a keen interest in such matters.
Regards Cjl 13:43, 28 March 2008 (EDT)
suspicious
Two IPs listed on this page http://wiki.laptop.org/index.php?title=Talk:OLPC_Mongolia/Ulaanbaatar/index.php&action=history
- 212.6.39.20 (talk · contribs) (blocked)
- 68.120.232.69 (talk · contribs) (blocked)
should be looked into. The "index.php" part and posting to a talk page of an article that doesn't really exist at that location is a familiar pattern. Cjl 14:43, 4 April 2008 (EDT)
index.php and nastiness
http://wiki.laptop.org/index.php?title=Home/index.php&action=history Cjl 02:07, 5 April 2008 (EDT)
Subtle, but still questionable
67.169.243.63 (talk · contribs) at http://wiki.laptop.org/index.php?title=The_OLPC_Wiki/index.php&action=history Cjl 13:57, 5 April 2008 (EDT)
- Blocked by ffm
maybe, maybe not
- Pretty sure it was Chinese link spam; we've gotten similar before. Deleted, thanks! —Joe 00:07, 7 April 2008 (EDT)
- That's what I thought too, it looked a lot like stuff in the delete logs from a while back. Cjl 00:54, 7 April 2008 (EDT)
- Another questionable one 80.234.10.86 (talk · contribs)
- Google translate implies it's Russian domain registration spam. Blocked and deleted. —Joe 23:53, 27 May 2008 (EDT)
nonsense added
- 80.87.131.100 (talk · contribs) (blocked by FFM)
- 89.222.130.250 (talk · contribs) (blocked by FFM)
- 62.141.48.212 (talk · contribs) (blocked by SJ)
- 67.169.243.63 (talk · contribs)(blocked by FFM)
- 91.90.10.230 (talk · contribs) (blocked by Leejc)
- 202.44.32.9 (talk · contribs) (blocked by Leejc)
- 206.53.51.110 (talk · contribs) (blocked)
- 200.40.84.26 (talk · contribs) (blocked)
- 86.105.181.238 (talk · contribs) (blocked)
- 121.52.144.37 (talk · contribs) (blocked)
- 218.26.219.186 (talk · contribs)(blocked by FFM)
- 202.120.139.212 (talk · contribs)(blocked by FFM)
- 208.31.123.3 (talk · contribs)(blocked by FFM)
- 64.192.5.183 (talk · contribs)(blocked by FFM)
- 69.233.8.129 (talk · contribs)(blocked by FFM)
- 203.162.2.137 (talk · contribs)(blocked by FFM)
- 202.120.139.212 (talk · contribs) (blocked by FFM)
- 63.226.162.114 (talk · contribs) (blocked by FFM)
- 203.162.2.134 (talk · contribs) (blocked by FFM)
- 87.236.233.52 (talk · contribs) (blocked by FFM)
- 202.120.139.211 (talk · contribs) (blocked by FFM)
- 78.129.208.145 (talk · contribs) (blocked by Leejc)
Simply in need of guidance?
The content on Microprocessor definitely belongs over in User space, not Main. Is "Microprocessor" is too important a concept to leave this page alone? It reads more like someone in need of guidance and not necessarily a vandal, but the previous question remains to be answered. Cjl 15:09, 10 April 2008 (EDT)
- You could leave the user a comment about moving it to user space; then if it hasn't happened after a while, to move it yourself with another note. Definitely guidance more than vandalism, when there's a question. --Sj talk 10:18, 24 April 2008 (EDT)
More index.php suspects
- 84.19.188.30 (talk · contribs) (blocked)
- 80.234.1.238 (talk · contribs)
- 195.5.116.248 (talk · contribs) (blocked)
- 77.120.128.243 (talk · contribs) (blocked)
- 207.210.68.2 (talk · contribs) (blocked)
- 87.118.104.145 (talk · contribs) (see contribs, pattern) (blocked)
- 87.248.173.155 (talk · contribs) (blocked)
Note: For these index.php offenders, the only change they make is the creation of the page. If you delete the page, please also block the user, ideally with a link to the page as the block reason. Otherwise it is hard for others to find the reason to block the user, because deleted pages no longer show up on their contribution history.
Link spam
- 212.44.130.15 (talk · contribs) (blocked)
- 203.158.221.227 (talk · contribs) (blocked)
- 62.109.177.6 (talk · contribs) (blocked)
- 88.200.179.212 (talk · contribs) (blocked)
- 78.129.202.17 (talk · contribs) (blocked)
- 123.120.154.156 (talk · contribs) (blocked)
- Realpr453 (talk · contribs) (blocked)
- 203.162.2.133 (talk · contribs) (blocked)
- 211.29.189.52 (talk · contribs) (blocked)
Page blanker
- 217.171.129.77 (talk · contribs)(blocked)
- 92.40.51.211 (talk · contribs)(blocked)
- 92.40.3.248 (talk · contribs)(blocked)
- 69.94.124.234 (talk · contribs)(blocked)
- 123.236.96.209 (talk · contribs)(blocked)
- 203.162.2.136 (talk · contribs)
(blocked)back again - 80.66.177.146 (talk · contribs)(blocked)
- 24.242.117.34 (talk · contribs)(blocked)
- 70.119.20.75 (talk · contribs)(blocked)
- 70.138.10.77 (talk · contribs)(blocked)
- 72.189.185.79 (talk · contribs)(blocked)
- 125.63.77.3 (talk · contribs)(blocked)
- 207.62.217.252 (talk · contribs) (blocked)
- 200.133.15.2 (talk · contribs) (blocked)
- 200.219.152.6 (talk · contribs) (blocked)
- 201.114.194.163 (talk · contribs) (blocked)
- 24.238.49.176 (talk · contribs) (blocked)
- 219.129.239.147 (talk · contribs) (blocked)
- 76.214.154.84 (talk · contribs) (blocked)
- 209.124.220.59 (talk · contribs) (blocked)
- 12.32.217.24 (talk · contribs) (blocked)
- 195.40.4.49 (talk · contribs) (blocked)
one-character vandals?
I caught a one-character typo vandal today, which reminded me a bit like a few other odd minor vandalism edits. I wonder if there are people sporadically testing this (and perhaps other popular) wikis, as a simpler version of the random-string spammers.. --Sj talk 10:16, 24 April 2008 (EDT)
- I've done some analysis of the block logs and linked it from a stub page OLPC:Bot_Interest_Group. I think some of these are very possibly simple errors by new eidtors, but some definitely have the characteristic signs of being "probes" by vandals, see OLPC:Bot_Interest_Group/Tracking#Observation_4:. Matching up the patterns is inexact and so in most cases it is hard to say. cjl 15:39, 12 August 2008 (UTC)
user template
Note: you can use {{user|name/ip}} to get an easier-to-use rundown of a user's contribs.
User:Felice/ebook.html.template
Perhaps you could consider semi-protecting this page, no anonymous edits, I don't want to fight/lose an edit war with the page blanking bot that has a thing for this page. I can see no valid reason for blanking, it has i18n template info I'm interested in using at some point. Cjl 23:01, 5 May 2008 (EDT)
- Seventh time rescue, pretty, pretty please consider semi-protect. Cjl 17:53, 10 May 2008 (EDT)
- OK, it should be locked to unregistered users now. Thanks —Joe 22:29, 13 May 2008 (EDT)
- Thanks, I really believe semi-protection is merited in this case. It will be interesting to see if the bot moves to another page :-( Cjl 23:08, 13 May 2008 (EDT)
URGENT need for anti-vandalism bot
The wiki vandalism is getting out of control. I see (what are to me at least) clear signs of increasing sophistication in the automation of the attacks. I can't beat the bot at it's own game, OLPC needs a counterbot, NOW. Cjl 19:33, 12 July 2008 (UTC)
- Feel free to set up cluebot. ffm 04:34, 13 July 2008 (UTC)
- ffm, This is simply not a helpful reply, I find it rather disappointing. You should try to be more thoughtful in responding, this is a serious problem and requires a serious answer, not a flippant "DIY" Cjl 05:08, 13 July 2008 (UTC)
- SJ is going to be gone for some time. If you do the documentation/research I can get any additional passwords we need from Henry whilst he is away(if he indeed can not be reached) Seth 09:30, 13 July 2008 (UTC)
- ffm, This is simply not a helpful reply, I find it rather disappointing. You should try to be more thoughtful in responding, this is a serious problem and requires a serious answer, not a flippant "DIY" Cjl 05:08, 13 July 2008 (UTC)
Vandalizing the vandalism page
I just undid edits by 79.68.53.182 -- deleted all content on the page and the discussion. I presume this was not a sanctioned action. -- Davewa 21:41, 22 January 2009 (UTC)
- Thanks Dave, that IP has now been blocked. cjl 23:44, 22 January 2009 (UTC)