We now have a persistent rapid-fire page-move vandal or vandals, using
the terms "Willy on Wheels" (and variants), "Pelican shit" (and
variants) and now "Sockster".
We urgently need per-user-account and per-IP rate limiting on page moves
for non-admins. The user's MO appears to be (according to a Slashdot
post, which may be from them) to use a tabbed browser to line up a load
of page moves in advance, and then to commit them all at once. They
_claim_ to be using bots, or to be a giant army of cooperating trolls,
but at the moment I doubt this.
A "leaky bucket" rate limiter with a bucket size of three moves, and a
refill rate of one page move per minute would seem like a good first
hack at the rate limit.
Needless to say, rate limiting should not apply to admins, as they need
to be able to clean up the mess faster than it is created.
And yes, a single-click page move undo would be good too, but I can't
see that being ready for some time to come.
-- Neil