[01:34:46] 10Diffusion, 07Regression: Unable to browse refs/meta/config in Diffusion - https://phabricator.wikimedia.org/T137354#2589891 (10Krenair) If you pass `["refs/meta/config"]` as `refs` and `"OPUP"` as `callsign` to Phabricator's `diffusion.resolverefs` API, it recognises the current tip of OPUP's refs/meta/confi... [01:55:45] 10Phabricator, 06Labs, 07Puppet: Update phabricator puppet role to support use on labs - https://phabricator.wikimedia.org/T144112#2589893 (10Peachey88) [03:43:28] 10Phabricator, 10Striker, 13Patch-For-Review: Unable to mirror repository from git.legoktm.com into diffusion - https://phabricator.wikimedia.org/T143969#2589903 (10mmodell) >>! In T143969#2588993, @bd808 wrote: >>>! In T143969#2588955, @mmodell wrote: >> One more possibility that sidesteps the issue: >> >>... [14:52:49] 10Differential, 05Gerrit-Migration, 10Phabricator, 13Patch-For-Review: Enable differential.allow-self-accept in phabricator - https://phabricator.wikimedia.org/T131622#2591131 (10Paladox) We should have some way of letting project authors merge there own patches without needing to have someone accept it fo... [16:11:45] 10Phabricator, 06Labs, 07Puppet: Update phabricator puppet role to support use on labs - https://phabricator.wikimedia.org/T144112#2591508 (10mmodell) related {T131899} [16:16:10] uh https://phabricator.wikimedia.org/T144200 [16:16:15] twentyafterfour: andre__ ^ [16:16:40] https://phabricator.wikimedia.org/p/Mackthomas2323/ already created 3 tasks [16:17:20] https://phabricator.wikimedia.org/p/Bunny1.2.3/ [16:18:02] Glaisher: thanks [16:18:57] Those spammers have been spamming at mw.org for months [16:19:07] looks like they've started phab now [16:19:30] oh dear [16:19:34] another one https://phabricator.wikimedia.org/p/Rfedwtg/ [16:21:31] I don't know how to deal with the mediawiki.org accounts but I've disabled the phab accounts and closed the tasks found so far [16:23:04] sigh [16:23:07] thanks [16:23:18] all the same IP [16:23:24] https://phabricator.wikimedia.org/people/logs/query/ED91DKBcvZCn/#R [16:23:31] (probably admin link only ^ ) [16:24:26] I wonder how to remove those Pastes from getting indexed by search engines. As I cannot easily edit Pastes as an admin, sigh. [16:24:56] and all is IP 103.38.177.2 [16:26:22] we should consider adding /paste to robots.txt ignore list imo [16:26:35] it's mostly junk and scratch space [16:26:45] Indeed, indeed. [16:27:01] I'd +1 [16:28:03] grr, and another one: https://phabricator.wikimedia.org/p/Staniya121/ disabled [16:28:30] are these all same-day mw registrations? [16:29:24] Is it possible to block IPs on phab? [16:29:56] Glaisher: yes we can block an IP but it's a bit involved but we can if warranted [16:30:01] is there one person behind all this? [16:30:23] We could block account creations at mw.org so that new accounts cannot be created at phab anymore [16:30:29] They are spambots [16:30:46] I just disabled three more accounts from IP 103.199.120.16 [16:31:13] looks like 103.38.177.2 is blocked at enwiki for 1 year {{blocked proxy}}: consistent source of spam account creation [16:32:03] andre__: I'll ban both? [16:32:30] Grr... there's more [16:32:33] chasemp, yes please [16:32:36] fuck.... grmpf [16:34:05] andre__: https://gerrit.wikimedia.org/r/#/c/307323/1/modules/phabricator/files/apache/phabbanlist.conf [16:34:31] * andre__ bookmarks [16:34:43] however for quick merges... well, I don't think I can self-merge :) [16:35:12] if you +1 that I'll go for it [16:36:07] to block: https://phabricator.wikimedia.org/p/Emmakapoor/ [16:36:59] I just blocked those IPs at mw.org to prevent more account creations [16:37:54] I am blocking them phab side too in case [16:39:08] already blocked [16:39:29] andre__: I hit that one Dereckson linked already yeah [16:41:05] twentyafterfour: ostriches ^ I'm blocking IP's due to jerks [16:41:54] https://phabricator.wikimedia.org/people/query/1s4fDiIp.Wyr/#R for list of latest account creations. I hope I disabled all now. [16:42:05] ...and blanked their Tasks. Not their Pastes though. [16:55:41] Next IP spamming: 91.218.229.132 [16:55:47] (I blocked that account) [17:02:24] Ok this is getting old real fucking quick. [17:03:45] ugh [17:05:16] well it's just whack-a-mole... But quiet for the last 10min [17:05:17] I keep an eye on the list of newly created Phab accounts [17:05:31] at least for another hour until that real life thingy calls [17:11:58] Soooo, I cleared out those spam pastes. [17:12:12] Cleared out -> set the viewPolicy and editPolicy to admin, set the title to "Stupid spammer" [17:12:20] So most people won't see them now [17:12:58] +archived [17:13:37] I wonder if we can require the account be autoconfirmed prior to making a Phab account, or something... [17:13:49] (require the mw.org account, that is) [17:13:51] Hmm, that could be shweet [17:22:05] hmmmmm hmmmm [17:22:39] Don't forget we've new contributors who want to contribute to MediaWiki code without being active on a Wikimedia editorial project. [17:22:51] I'm not sure all of them create a LDAP account. [17:27:13] True. [17:45:42] stupid spammers. [17:48:22] 10Phabricator: Links should be provided from a Phabricator project page to its source code page in Diffusion - https://phabricator.wikimedia.org/T144127#2592077 (10greg) p:05Triage>03Low Yes, that would be nice to do for all appropriate projects. [17:54:28] 10Phabricator, 06Project-Admins: Links should be provided from a Phabricator project page to its source code page in Diffusion - https://phabricator.wikimedia.org/T144127#2592096 (10mmodell) [18:07:43] and more spam: https://phabricator.wikimedia.org/p/Maddy4444/ [18:07:46] Disabled that account [18:08:05] IP is 104.236.56.95 [18:08:26] created four Pastes [18:08:30] * andre__ is off soon [18:08:38] so, plan for this? [18:10:31] well, all *I* can do is watch https://phabricator.wikimedia.org/people/query/1s4fDiIp.Wyr/#R (latest account creations) and check activity and IPs via https://phabricator.wikimedia.org/people/logs/query/advanced/ . And that does not scale of course... [18:10:41] :/ [18:11:36] and 104.236.56.95 created another account [18:11:59] ...disabled account Dgdret63. [18:12:09] Maybe what we could do is apply the 10 edit limit before allowing users to create phab accounts. [18:12:18] if it is a bot it should not work correctly. [18:13:04] 17:22 < Dereckson> Don't forget we've new contributors who want to contribute to MediaWiki code without being active on a Wikimedia editorial project. [18:13:05] I don't think we can expect users to have 10 edits on-wiki before being able to report a software issue as a *reader*. [18:13:52] Wondering if upstream has any take on this. https://phabricator.wikimedia.org/T84 comes to my mind. [18:15:27] Oh [18:15:48] we should at least let them know of the situation and what we're doing (manually) do deal with it [18:16:16] How do we manage to control spam on mw.org? [18:16:22] greg-g andre__ ^^ [18:16:50] very differently than on phabricator [18:17:01] abuse filter + people watching logs [18:17:06] (maybe not abuse filter) [18:17:16] Oh, maybe we could create a abuse filter for phabricator? [18:17:33] abusefilter is a mw extension, so no [18:17:58] hence the "very differently" part [18:18:23] Oh, i mean develop a extension similar to that for phabricator [18:18:58] 10Phabricator, 06Labs, 13Patch-For-Review, 07Puppet: Update phabricator puppet role to support use on labs - https://phabricator.wikimedia.org/T144112#2592218 (10Paladox) [18:19:03] 10Phabricator, 06Labs, 07Puppet: Phabricator labs puppet role configures phabricator wrong - https://phabricator.wikimedia.org/T131899#2592220 (10Paladox) [18:19:30] 10Phabricator, 06Labs, 13Patch-For-Review, 07Puppet: Update phabricator puppet role to support use on labs - https://phabricator.wikimedia.org/T144112#2588887 (10Paladox) We will fix production role first and after that remove the labs role once production role works in labs :) [18:24:10] paladox, No custom extensions please which only create maintenance costs. :) Anything long-term has to be aligned with upstream thoughts. [18:24:23] Oh ok [18:24:33] (saying so as "write some extension" does not sound like a short-term solution to me) [18:28:09] andre__afk: what's our rate of new account creation? [18:28:58] chasemp, https://phabricator.wikimedia.org/people/query/1s4fDiIp.Wyr/#R [18:29:27] yeah seems like 5-15 a day [18:30:06] it's a tough problem, you are basically looking at either slowing down the bad actors to mitigate damage [18:30:22] or absorbing the cost of dealing with manual things [18:30:45] chasemp: can you make me an admin to help with spam while andre is out? [18:30:48] twentyafterfour and I have talked about a few times limiting oauth accounts to min 3 days old [18:30:52] greg-g: sure [18:31:32] I'm confirming you are you and not some nefarious agent [18:32:17] yep [18:32:18] ok [18:32:29] and also it's kind of awesome it made me re-2fa to get that done [18:34:09] greg-g: true story I use to read https://phabricator.wikimedia.org/feed/ every day to completion [18:34:26] it's fun that's no longer viable by a longshot [18:57:58] chasemp: ty sir [19:01:50] greg-g: one thing I was just poking at is having wikibugs who already knows about all changes look for rate of change and rate of change for unseen user [19:01:59] I don't have time to hack on it atm but maybe food for thought for you guys [19:02:13] you could bend that a few ways to be useful for at least catching bad actors [19:02:22] yeah, some kind of icinga alert based on that data [19:03:35] I was thinking just premptive irc notice as our current model is 'someone notices' [19:03:38] but it could go deeper [19:04:38] * greg-g nods [19:04:42] * greg-g goes to lunch [19:08:22] * paladox has already had lunch and dinner :) [19:14:49] 10Phabricator, 06Labs, 07Puppet: Phabricator labs puppet role configures phabricator wrong - https://phabricator.wikimedia.org/T131899#2592521 (10Paladox) 05duplicate>03Open Re opening for now since the main role will take a while to fix. [19:23:07] chasemp, andre__afk: I was thinking we could at least write a bot that *detects* things so we're alerted immediately.... [21:24:19] greg-g: https://phabricator.wikimedia.org/T86611#2592851 more spam? [21:30:51] tgr: looks like they clicked "protect as a security issue" [21:30:57] not sure if spam [21:31:16] I looked at their history, it's surely spam [21:31:26] or naive enough interactions to be teh same outcome [21:33:01] yeah [21:33:10] probably [21:33:25] https://www.mediawiki.org/w/index.php?title=Wikimedia_Developer_Summit_2016/Program&diff=prev&oldid=2224376 etc [21:33:42] it's a spammer, just a rather dumb one [21:34:20] * greg-g nods [21:35:42] I disabled them but don't have time to undo whatever sillyness they inflicted [21:35:43] and also [21:35:49] did something change to invite all this crap? [21:35:55] seems escalated a lot over a week [21:36:18] probably should be globally blocked, it's spamming on wikidata and enwiki as well [21:36:40] we don't have the rights :/ [21:36:57] chasemp: I undid that "protect as security issue", which I think is it for that user [21:37:18] (I fumbled a bit doing it, but, whatever) [21:37:41] I'm quick ti disable as there is no lasting harm fwiw [21:37:48] and I have somehwat of a sense of what a silly user does now [21:37:50] or so I think [21:37:55] s/ti/to [22:40:29] Oh shweet, no new Phab accounts. [22:40:31] * andre__afk goes to sleep [22:41:08] and in the long run, being able to define both some IPs and some regexes on content would be cool IMHO [22:41:16] (to block) [22:42:39] 10Diffusion, 07Regression: Unable to browse refs/meta/config in Diffusion - https://phabricator.wikimedia.org/T137354#2593198 (10mmodell) Phabricator really just has special case handling of branches and tags but doesn't have good support for other refs. It knows about them but there is no UI for browsing refs. [22:49:18] 10Diffusion, 07Regression: Unable to browse refs/meta/config in Diffusion - https://phabricator.wikimedia.org/T137354#2593213 (10mmodell) @paladox has it figured out, you need to fake the branch name with /browse/`refs%252Fmeta%252Fconfig/` (this gets displayed in the breadcrumbs at the top of the page, and is... [22:50:10] 10Diffusion, 07Regression: Unable to browse refs/meta/config in Diffusion - https://phabricator.wikimedia.org/T137354#2593214 (10mmodell) Can we just append `;refs/meta/config` to links in gerrit? [22:53:22] 10Diffusion, 07Regression: Unable to browse refs/meta/config in Diffusion - https://phabricator.wikimedia.org/T137354#2593226 (10Paladox) @mmodell I doint think so, unless we do an upstream change that allows us to change the link on a per branch link in gerrit. I have been trying to do this but it didn't work. [22:56:50] 10Diffusion, 07Regression: Unable to browse refs/meta/config in Diffusion - https://phabricator.wikimedia.org/T137354#2593244 (10Paladox) Unless we add something on phabricator side that detects refs/meta/config and then add ;refs/meta/config