User talk:Techpriest/Fixing up AbuseFilter

Notes

@Sirius If I understand this proposed change correctly, it takes away the ability for Techs to view private details in the abuse log. Per this page, shouldn't the proposed change be

$wgGroupPermissions['sysop']['abusefilter-privatedetails'] = true;

...instead? (That is, abusefilter-privatedetails instead of abusefilter-private).

I would suggest that this permissions be removed from moderators as well, in the rare event that we have a moderator who goes rogue.

I recommend that to do this right, the proposed change be brought before the mob and subject to a vote. Also, the foundation board of directors should be notified about any proposed change to the technical configuration of the server. They're ultimately responsible for managing the trusted people who have root access to the server. —cosmikdebris ^talk stalk 16:32, 11 December 2020 (UTC)

@Cosmikdebris The change was brought before the mob ages ago and resulted in the demotion of Dysk/Dredd (who claimed to have used it to identify Smith on IPs as well as DMorris) and a consensus that it shouldn't happen again. I had back then already suggested taking away the right in question and David was supposed to follow up on it, but I suspect it might just have slipped from his radar. The page was written with the intent of asking David to do it, with the remote possibility of Trent or Tim. As for proposing it to the board, I could do that if you think it'd expedite the process a bit/don't hold faith in this going through from David. This was a problem that kinda sneaked its way through even though it's been decided ages ago that we don't do checkuser. Also yes it should be privatedetails, my mistake. I'll fix that up right now. Techpriest ^{(I am Alpharius! / / / )} 19:16, 11 December 2020 (UTC)

Also, mods don't have the right as far as I can tell from Special:ListGroupRights. Techpriest ^{(I am Alpharius! / / / )} 19:20, 11 December 2020 (UTC)

I think we're in complete agreement here. The reason I thought that a formal proposal was a good thing is that this effort can be clearly scoped out so that everyone knows the rationale for the change and the specifics of the effort. I can be the liaison to the RMF board for you, as I got invited to participate in the last board meeting and was appointed secretary. —cosmikdebris ^talk stalk 19:58, 11 December 2020 (UTC)

In that event, I already asked David to do it on Twitter today (he hasn't responded or acted on it yet to my knowledge), but in any case, I wouldn't object to putting this on the agenda for the next board meeting to verify that it happened and if not to ask someone with server access to act on the necessary changes. If you need a more specific outline of the issue, feel free to ask me, I can provide all required technical details incl. screenshots if needed. I'd be glad to work with you. Techpriest ^{(I am Alpharius! / / / )} 20:13, 11 December 2020 (UTC)

I'll make sure the board is aware. Thanks for the work needed to get this implemented. —cosmikdebris ^talk stalk 20:20, 11 December 2020 (UTC)

@Cosmikdebris It has been resolved by David, I can verify this by checking an IP address that got caught (seeing IPs of IPs isnt an issue) and no longer having access to the private details section. It was abusefilter-private in the end. I think privatedetails might have been a newer version (abusefilter-private appeared in the user rights list, details didn't), and we were running a slightly older version. Thanks a lot for your assistance anyway. If you want to put a notice to the board that it has been resolved, you may, but as far as I am concerned the problem has been fixed. Techpriest ^{(I am Alpharius! / / / )} 15:56, 12 December 2020 (UTC)