[Mediawiki-l] [PATCH] anonymous editing

[Hanno Böck]

Am Mittwoch 27 Mai 2009 schrieb Nikola Smolenski:
> I was thinking about this issue and I believe I have "the best of both
> worlds" solution, if someone is willing to code it. Take an IP address,
> concatenate it with a long string (salt), take its MD5 and use that as
> the anons' username. Two different IPs will have two different anon
> usernames, but for the readers it will not be possible to find out what
> is the original IP from the username.

If you have ideas how to implement this, I'd like to hear them, though this is 
not as trivial as it might seem.

This method only works if the salt is kept secret and changed regularly. I 
don't know how this could be implemented in a php app. If the salt is kept, 
the anonymity is not guaranteed - the range of IPs allows just calculating 
all of them with a given salt.

-- 
Hanno Böck		Blog:		http://www.hboeck.de/
GPG: 3DBD3B20		Jabber/Mail:	hanno at hboeck.de
http://ausdenaugenausdemsinn.de - Kein Sicherheitsrabatt für CO2-Speicher
http://tinyurl.com/dceu73 - Internetzensur stoppen!

http://schokokeks.org - professional webhosting
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
Url : http://lists.wikimedia.org/pipermail/mediawiki-l/attachments/20090528/11c72f28/attachment.pgp