IP Masking
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	Naike
	Sep 8 2020, 8:07 PM

Description

Request Status: New Request
Request Type: project support request

Request Title: IP Masking

Request Description: Improving the privacy of anonymous editors while continuing to support admins prevent vandalism on projects.
Indicate Priority Level: High
Main Requestors: @Niharika
Ideal Delivery Date: FYQ4
Stakeholders: @DannyH
Estimated effort: 1 FTE, 1 quarter

Request Documentation

Document Type	Required?	Document/Link
Related PHAB Tickets	Yes	<add links here>
Product One Pager	Yes	<add link here>
Product Requirements Document (PRD)	Yes	IP Masking PRD
Product Roadmap	Yes	<add link here>
Product Planning/Business Case	No	<add link here>
Product Brief	No	<add link here>

Related Objects
Search...

Status	Subtype	Assigned	Task
Resolved		lbowmaker	T262321 IP Masking
Resolved		tstarling	T300263 [IP Masking] Create temporary account on first edit
Duplicate		None	T307054 [IP Masking] Temporary account mobile web support in editing workflow
Duplicate		None	T307056 [IP Masking] Temporary account VisualEditor support
Resolved		matmarex	T307057 [IP Masking] Temporary account Timeless support
Open		None	T307060 [Epic] Temporary account AbuseFilter support
Resolved		STran	T331653 Investigate: Update AbuseFilter for IP Masking
Resolved		Umherirrender	T328311 Special:AbuseLog is missing the `mw-tempuserlink` class from temporary account user links
Resolved		• AGueyte	T335062 Update AbuseFilter with the right user verification
Duplicate		• AGueyte	T335064 Investigate AbuseFilter Hook with CheckUser
Resolved		STran	T334623 How do we log unsuccessful first edits for temporary users?
Resolved		Dreamy_Jazz	T357615 Create filters to distinguish anonymous/temporary/registered users
Resolved		STran	T357772 Investigate: How will `ip_in_range` and `ip_in_ranges` function when temporary accounts are enabled
Resolved		STran	T364833 Add `user_unnamed_ip` variable
Open		STran	T363906 Ensure filters that use PII-sensitive variables are protected
Resolved		STran	T364465 Display changes to protected status and flags on AbuseFilter history and diff pages
Resolved		STran	T364485 Alert a filter editor that a filter must be protected if it is saved with a protected variable
Resolved		kostajh	T365049 Investigate what to do about the AbuseFilter log revealing someone's IP address via historical logs
Stalled		None	T365743 Log when AbuseFilter user sees IP address associated with temp account via user_unnamed_ip variable trigger
Resolved		Tchanders	T364902 How should access to IPs of temporary accounts be logged?
Open		STran	T367390 Add granular query restrictions for AbuseFilter filter search
Open		STran	T364834 Ensure testing tools that use `user_unnamed_ip` don't reveal it to users without the view right
Stalled		None	T369610 Decide who gets the `abusefilter-access-protected-vars` right
Open		None	T369611 Update IP-using AbuseFilter filters to use `user_unnamed_ip`
Resolved		STran	T357774 Investigate: What to do with existing filters that temporary accounts will break
Resolved	BUG REPORT	Dreamy_Jazz	T358632 CannotCreateActorException when creating a temporary account on an edit which causes an abuse filter log
Open		None	T365740 Document the changes introduced for temporary accounts
Open		None	T307062 OOUI PopupWidget behaviour when floating over an element that is outside the viewport
Open		None	T307063 [IP Masking] Use edit stash during temporary account creation flow
Declined		tstarling	T300265 [IP Masking] Inform username accounts prefixed with "*"
Resolved	Spike	Niharika	T300267 [IP Masking][Spike] Investigate special character occurrences for temporary account usernames
Open		None	T300268 [IP Masking] Notify temporary account user on subsequent edits
Open		None	T300269 [IP Masking] Temporary account talk page
Resolved		Urbanecm_WMF	T300271 [IP Masking] Temporary Account Expiration
Resolved		Urbanecm_WMF	T344695 [IP Masking] Expire temporary accounts in 1 year
Resolved		Sgs	T344694 [IP Masking] Alert temporary accounts 10 days before expiration
Resolved		Cyndymediawiksim	T300273 [IP Masking] Temporary account to registered account creation flow
Resolved		Cyndymediawiksim	T346327 Track impressions, success and abandonment rate on the signup form
Resolved		Cyndymediawiksim	T350923 [IP Masking] Temporary account to registered account creation flow (layout fixes)
Resolved		tstarling	T307064 [IP Masking] Maintenance script to rename users matching configured TempUser pattern
Resolved		Niharika	T307065 IP Masking test wiki

Event Timeline

Naike created this task.Sep 8 2020, 8:07 PM

Restricted Application added a subscriber: Aklapper. · View Herald TranscriptSep 8 2020, 8:07 PM

Naike set the point value for this task to 1.Sep 8 2020, 8:08 PM

• eprodromou moved this task from Next to Later (future inbox) on the Platform Engineering Roadmap board.Sep 9 2020, 2:10 PM

�� eprodromou moved this task from Later (future inbox) to Next on the Platform Engineering Roadmap board.Sep 9 2020, 2:14 PM

Naike added a project: Platform Engineering Roadmap Decision Making.Sep 11 2020, 9:23 AM

Naike moved this task from Next to Later (future inbox) on the Platform Engineering Roadmap board.Sep 14 2020, 9:08 AM

WDoranWMF added a project: Product-Feature.Sep 30 2020, 9:02 PM

dbarratt mentioned this in T264545: Create an API endpoint to allow getting information about a user's all active IP addresses.Oct 4 2020, 9:12 PM

• eprodromou removed a project: Platform Engineering Roadmap Decision Making.Oct 6 2020, 5:43 PM

• eprodromou added a project: Tech-Product API Roadmap.Dec 3 2020, 6:32 PM

Naike moved this task from Later (future inbox) to Next on the Platform Engineering Roadmap board.Dec 7 2020, 6:41 PM

• eprodromou moved this task from Untriaged to Next on the Tech-Product API Roadmap board.Dec 9 2020, 9:44 PM

WDoranWMF moved this task from Next to Later (future inbox) on the Platform Engineering Roadmap board.Feb 16 2021, 4:39 PM

Naike moved this task from Later (future inbox) to Next on the Platform Engineering Roadmap board.Mar 31 2021, 7:24 PM

Naike moved this task from Next to Design on the Platform Engineering Roadmap board.May 18 2021, 7:09 PM

@Naike the doc in the description says it's outdated, and it links to another doc that is not publicly viewable; could you or someone else please make it public?

Currently stalled on @tstarling 's availability to assist AHT in this implementation

• sdkim moved this task from Backlog to Ready/Groomed on the Foundational Technology Requests board.Oct 26 2021, 5:03 PM

• sdkim claimed this task.Nov 1 2021, 1:52 PM

• sdkim updated the task description. (Show Details)Nov 4 2021, 6:40 PM

Spoke to @Niharika @Prtksxna and looking to kickoff near Mid-January.
Need to find availability with @tstarling and understand when Parsing work will be wrapped up to transition to working on IP Masking

December 20, 2021 - Product Steering Committee

any impact to the way we define account will impact the account creation experience
Growth team will reach out to AHT team to coordinate impacts of the change
rolling out should be coordinated to make sure we are prepared for the change
Alternative options - GUID - any string

Action Items:

Growth team, Web, Editing, coordinate meeting to discuss

• sdkim updated the task description. (Show Details)Dec 20 2021, 7:45 PM

• sdkim updated the task description. (Show Details)Dec 20 2021, 7:49 PM

In T262321#7581000, @DAbad wrote:

December 20, 2021 - Product Steering Committee

any impact to the way we define account will impact the account creation experience

Growth team will reach out to AHT team to coordinate impacts of the change

rolling out should be coordinated to make sure we are prepared for the change

Alternative options - GUID - any string

Action Items:

Growth team, Web, Editing, coordinate meeting to discuss

🚨 scope creep alert 🚨

The latest discussions on T6845: CAPTCHA doesn't work for people with visual impairments seem to agree on removing the CAPTCHA; if the IP masking project implementation will aim to prevent spam without using the CAPTCHA system (or if it proposes to use some CAPTCHA-like alternative to prevent spam edits), then it might make sense to also deal with normal account creation in the context of this project and finally close out T6845.

as an aside, could the DSO artifact please be made public?

@kostajh I've made the document public now

• sdkim changed the task status from Stalled to Open.Jan 27 2022, 7:20 PM

• sdkim reassigned this task from • sdkim to • DAbad.

Niharika added a project: Temporary accounts.Jan 27 2022, 7:20 PM

• DAbad reassigned this task from • DAbad to lbowmaker.Feb 1 2022, 9:32 PM

• DAbad moved this task from Ready/Groomed to QA/Review on the Foundational Technology Requests board.Apr 27 2022, 3:47 PM

April 27, 2022 Update

We will be taking the time to put this through the Technical Decision Forum to ensure we get as much feedback as possible before pushing this through.

• DAbad moved this task from QA/Review to Parking Lot (Reviewed but Not Prioritized) on the Foundational Technology Requests board.May 9 2022, 4:12 PM

• DAbad moved this task from Parking Lot (Reviewed but Not Prioritized) to Ready/Groomed on the Foundational Technology Requests board.

• DAbad changed the task status from Open to In Progress.Jun 8 2022, 3:13 PM

• DAbad moved this task from Ready/Groomed to QA/Review on the Foundational Technology Requests board.

Sunpriat2 subscribed.Aug 2 2022, 6:28 AM

Tgr updated the task description. (Show Details)Oct 24 2022, 11:07 PM

Tgr mentioned this in T20981: Allow anonymising of unregistered users ("IP editors").Oct 24 2022, 11:09 PM

Aklapper merged a task: T20981: Allow anonymising of unregistered users ("IP editors").Nov 19 2022, 9:32 PM

Aklapper added subscribers: Peachey88, Tgr, Carn and 35 others.

Tgr updated the task description. (Show Details)Nov 20 2022, 9:46 PM

Niharika closed subtask T307065: IP Masking test wiki as Resolved.Dec 17 2022, 11:41 PM

Niharika closed subtask T300267: [IP Masking][Spike] Investigate special character occurrences for temporary account usernames as Resolved.Dec 18 2022, 12:39 AM