Thatcher131 Wikipedia wrote:
Gmaxwell correctly pointed out in an email to checkuser-L that if Tor exits are hardblocked, smart puppetmasters will use other proxies. True, but we can block those proxies. We *can't* block Tor exits, at least if the override behavior is in place. In fact, with the override enabled, the new extension will actually *encourage* sockpuppeteers to use Tor, because it will guarantee they will always be able to edit as long as they have the patience to wait for their socks to be autoconfirmed. They will no longer run the risk of enrolling in a commercial anonymizing service only to discover that we have blocked it.
Then it could be configured to perform a complete block for those wikis which really want that (not as the default, although completely blocking tor is tempting). It will still keep an updated Tor list, as opposed to having half tor edits working or not, or running a bot as sysop each X time to block exit nodes. It might be a good idea to set a magic IP address, such as 255.255.255.tor whose blocks affected to any exit node in case of tor vandalism.
Good work, Andrew. Nonetheless, i encourage you to rename $wgTorIPs. It's counterintuitive, as $wgTorIPs aren't the Tor IPs but the server ones! What about $wgTorExitsMediawikiIPs ?