[07:42:54] all users that just registered, and lately there's an increasing in the number of throwaway accounts: [07:42:55] https://cdn.discordapp.com/attachments/443926951292567562/752433699110387793/unknown.png [07:43:08] https://meta.miraheze.org/wiki/Special:AbuseLog?wpSearchUser=&wpSearchPeriodStart=&wpSearchPeriodEnd=&wpSearchTitle=&wpSearchImpact=0&wpSearchAction=any&wpSearchActionTaken=&wpSearchFilter=&wpSearchWiki=cwarswiki [07:43:09] [ Abuse filter log - Miraheze Meta ] - meta.miraheze.org [07:44:19] is it possible to implehement something like 25/49h delay time between two registrations? or would that be based on IPs, so substantially useless? [07:50:55] Yes, it's possible via abuse filter or via change in LocalSettings.php file. You mean limit account creation from one IP to 1 per day, right? (by default it's on number 5) [07:51:00] @Cleavages ^ [07:52:00] essentially, yes [07:52:57] See https://www.mediawiki.org/wiki/Manual:$wgAccountCreationThrottle please [07:52:57] [ Manual:$wgAccountCreationThrottle - MediaWiki ] - www.mediawiki.org [07:54:36] Line 76 here > https://github.com/miraheze/mw-config/blob/master/LocalSettings.php Let me know if you want change it. [07:54:37] [ mw-config/LocalSettings.php at master · miraheze/mw-config · GitHub ] - github.com [07:55:45] hmm... [07:56:00] first time i create a filter, where should i past that thing? [07:58:33] So it can be changed in LocalSettings.php [07:59:27] A local wiki filter wouldn't be effective, since account creation is centralised [08:02:58] btw, i don't have access to localsettings, do i? [08:06:52] not directly, no [08:06:58] you can only make pull requests on GitHub [08:07:04] and they must be approved/merged by a sysadmin [08:07:14] https://github.com/miraheze/mw-config/blob/master/LocalSettings.php [08:07:15] [ mw-config/LocalSettings.php at master · miraheze/mw-config · GitHub ] - github.com [08:07:22] (the LocalSettings.php file is for all wikis) [08:12:12] uhu, yep [08:12:43] but you said a tweak to this file wouldn't affect my ituation. so, other suggestions? [08:16:43] it would have to apply to all wikis, so I'd like to see what @Stewards think about that first [08:18:06] uh, ok [08:18:49] it's also possible i'm overestimiating how big this is, but everytime i wake up and check wiki feed i have to try and discern edits from new account registrations, so... [08:21:49] so your issue is that one person is creating multiple accounts? [08:21:55] and editing from them? [08:22:36] i don't know if it's one [08:22:47] i assume so, since that looks like a spambot mask [08:23:10] and more like attempting to insert advertising in their personal pages [08:23:59] oh, there should be a global abusefilter to stop that [08:24:20] or else limiting account creation from an IP would probably be useless as spambots mostly work on ranges rather than one IP afaik [08:25:14] noted it, yep [08:25:28] so do you have any pages you could link me to? [08:25:37] if it's one link for example we can definitely block that [12:16:45] @Doug Please, for future, give me few mins (up to one hour) to mark actions as done. Not problem after two hours+, but after about 30 mins it is not necessary.... I know i should mark it. [13:28:53] > it would have to apply to all wikis, so I'd like to see what @Stewards think about that first @Reception123 iirc thats not actually true [13:30:21] Like, yes account creations are global and if somebody goes to another wiki they can bypass the registration limit (if and only I'd it doesnt apply to central auth auto creations), but that would more likely be a human anyways. I'm assuming most of the spammy creations are in one way or another actual bots, in which case a wiki specific limit might be effective. [13:30:41] Or maybe we could make it like, 1 or 2 globally and like, leave Meta the same [13:30:57] I mean how often does anyone really need to make 5 accounts per day [13:34:13] @NDKilla that seems reasonable, we could probably make it one or two accounts per day. If there was a need to make more accounts (like a professor creating accounts for his or her students), we could have an "account creator" user group on Meta that could be requested which would bypass this potential future account creation rate limit. [13:35:26] Pretty sure at least one group already has that but yeah [13:37:18] @NDKilla, oh I meant non-sysops, though. Users may have it, but I thought your idea would've also proposed to remove account creation user right from that user group or something. I should look more closely at the user group rights related to account creations. [13:39:32] @NDKilla I've disabled CA Create on view [13:40:14] Yeah I'm not sure off hand. Is sysop the only one with the ratelimit bypass? [13:40:20] But yeah globally I'd be in favor of 2 or 3 for any test accounts or bots [13:40:39] More would be a bit much IMO and there's not many legitimate uses I can think of [13:40:44] Uh, I think so yeah [13:41:33] Hrm, just checked enwiki's accountcreator user group and the only additional rights it has are: Not be affected by rate limits (noratelimit) Override the spoofing checks (override-antispoof) Override the username blacklist (tboverride-account) So they must have a global AF or something that limits the number of accounts both registered and anonymous users can create. [13:44:22] They likely use the standard mediawiki things. Title blacklist applies to users iirc and theres at least one setting already mentioned, that overrides both [13:53:29] Pretty sure that the rate limit on account creation is overridden by the noratelimit user right :P