For creating accounts from Tor exit nodes, you might just want to implement a CAPTCHA system and maybe a special form to fill out which would require validation from an admin for IPs that are specific to Tor. This would allow honest users that have to use Tor the ability to use your wiki, and it would keep out vandals.
Kasimir
On 2/20/07, Simetrical Simetrical+wikilist@gmail.com wrote:
On 2/20/07, Travis Derouin travis@wikihow.com wrote:
From my understanding, if a registered user uses an IP that has been blocked, they will also be blocked, correct? If a solution that works as a compromise is to ban just the anonymous edits from this these IPs, while allowing registered users to edit from these IPs, some sort of changes to Mediawiki will have to be put in place to accomodate this, as far as I know.
Such changes were committed some time ago. They're definitely in 1.9, possibly in 1.8 (can't remember offhand). There's now an option to block only anonymous edits from an IP.
Additionally, this doesn't prevent a vandal from creating multiple accounts, unless there's a way to increase the blocking on the IP to the normal, usual level so that registered users from that IP are also blocked.
It's also possible to block only account creation from an IP, thanks to the same set of changes to blocking. I don't think anyone minds if Tor accounts are allowed to edit from registered accounts, the question is whether they should a) be allowed to edit anonymously (answer: no), and/or b) be allowed to create accounts (answer: maybe).
Another possibility is that registered users from these IPs will have to confirm their registration via e-mail, if the wiki isn't configured to do so already. It'd be nice to have this option just for this special case.
Interesting point, but you could use the same address for all the accounts, surely, and the only ones who could tell (and, e.g., block the address somehow) would be people with database access. So you could just create adjgi39qaikc@hotmail.com and use it for all your accounts, and no one would be the wiser. (I assume we don't enforce unique e-mail addresses, but even if we do, you could have adjgi39qaikc+1@gmail.com, adjgi39qaikc+2@gmail.com, etc., which will all be delivered to you.)
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/wikitech-l