Community health initiative/Blocking tools and improvements/ja

2017年12月、ウィキメディア財団の「Anti-Harassment Tools team」（嫌がらせ防止ツールチーム）はウィキメディア利用者の皆さんに、新しいブロックツールと既存ブロックツールの改善の議論をお願いし、2018年初頭の開発着手を目指しました。チームの分析によりMediaWiki の既存のブロック機能に改良が必要な点を洗い出したところ、中断を最小限に抑え、悪意の利用者がそれぞれのウィキに参入するのを防ぎ、サイトブロックが不適切な場合の状況の裁定に充当するブロックツールの開発が求められるとわかりました。

This page documents a feature the Wikimedia Foundation's Anti-Harassment Tools team has committed to build.

🗣   We invite you to join the discussion!
🛠   Track in Phabricator at T120734.

情報更新

2019年9月11日

部分ブロックをウィキボヤージュ、ウィキソース、ウィクショナリーの各プロジェクトに実装しました。ここ数ヶ月でさまざまなプロジェクトへの導入が進み、この機能はバグの減少が目に見えて進み、現状で安定した良好な状態に達したと見なしています。将来の新機能追加を見越し、ブロックコードなどバックエンドのインフラ改善に注力してきたチームとして、コードの信頼性を上げることができました。

部分ブロック導入の規模は、さらに他のウィキからも申し入れがありました。またウィキマニアで部分ブロックのプレゼンを実施、なかなか好評を得たことと、観客席から自分が本拠とするウィキへの部分ブロック導入の希望を聞くことができました。導入済みのウィキではおおむね肯定的な評価を得ており、今後、数週間をかけ、ウィキメディアのより広い範囲のプロジェクトに展開の予定です。

部分ブロックに関するご意見ご要望は、これからより多くのウィキに導入する過程で募集をつづけ、またこの機能との同時利用に向けた日付修正機能を展開します。また臨機即応にメンテナンス作業を続けていきます。

2019年3月1日

Today I officially share the Wikimedia Foundation's Anti-Harassment Tools team's recommendations for tools to combat long-term abuse that occurs on our wikis. This 9-page document roughly defines the types of long-term abuse that occurs, outlines the existing tools and tactics used to mitigate and tolerate this behavior, investigates potential new softwares to combat this abuse (namely device blocking) and makes recommendations for next steps.

In brief, our recommendations are to avoid device blocking, as it would be an expensive endeavour with very low likelihood for successful impact. Instead, our team recommends alternate tactics including a user reporting system, improvements to CheckUser, additional muting features, and more.

An immediate byproduct of this research is that our team will work on extending cookie block functionality to the Visual and mobile editors. — phab:T196575

2019年2月15日

Initial feature development on partial blocks is complete! Admins can now set blocks that only prohibit editing on certain page(s) and/or namespace(s). The rollout will be slow and staged to ensure we didn't forget any important functionality.

2019年1月18日

I've compiled some data about how often the "you are blocked" messages appear to our users on Community health initiative/Blocking tools and improvements/Block notices. There are some graphs and a table of raw data as well as some synthesized findings. Here are the main takeaways:

• Block notices appear very often on the largest Wikimedia projects, sometimes outnumbering actual edits. (6.2 million blocked edits occured on English Wikipedia over a 30-day period.)
• The desktop wikitext editor sees the vast majority of impressions by a wide margin. (98% on English Wikipedia, 89.5% on Spanish, and 98.7% on Russian.)
• The VisualEditor and mobile block notices may occur less frequently, but still display to thousands of people every month. There are hurdles to optimizing their displays, given the legacy of desktop-first design.

2019年1月16日

Partial Blocks have been enabled on Italian Wikipedia! 🎉 We're looking for more Wikipedias to test, please leave us a talk page message if your community is willing to test! More information can be found at the project page.

Also of note is that our team is currently looking into potential software solutions to mitigate Long-Term Abuse on Wikimedia. We are exploring some ideas listed in § Problem 1. Username or IP address blocks are easy to evade by sophisticated users above. We are aiming for our preliminary investigation to be complete by the end of February and will publish all notes and findings here on Meta Wiki.

12月20日

Partial blocks are still in development. They are enabled on Test Wikipedia and will be enabled on Italian Wikipedia in January.

Data on the "you are blocked" messages is visible on this graph for seven wikis (more to be added soon.) I'll be spending this afternoon digging into some correlated block data to see if there are any interesting insights. For now, the most insightful things are: 1) far-and-away most people learn they are blocked on desktop via the wikitext editor 2) except on German Wikipedia, which has an incredibly high count of API blocks and 3) rough back-of-napkin calculations show that mobile block notices appear relative to desktop site notices the same as general edit trends (~95% of edits are from desktop editors.) Depending on what I have by the end of today I may post an addendum here.

One final note about blocking to close our 2018: in the next year my team will begin looking into device blocking, which was outlined and discussed as Problem 1. Username or IP address blocks are easy to evade by sophisticated users. We aim to make a proposal to the Wikimedia Board of Trustees in early 2019.

12月5日

Our team is still working on addressing the final defects before we enable Partial Blocks on Italian Wikipedia. We're optimistic that we can hit this milestone next week! In the meantime testing is available on Test Wikipedia and Test Wikidata for users interested in taking a look at what's ready so far. We're also confident that we can get Namespace blocks to a near-ready state by the end of December, before we break for the winter holidays. That functionality should be ready on Test Wiki in January.

Yesterday we enabled tracking on the block notice messages that appear to users — a.k.a. the "You are blocked" messages. The data is visible on this graph. This data is currently only being measured on Italian Wikipedia but we plan to enable it on 19 more wikis next week. We will be able to compare this to the other known block data to better understand how often blocked users attempt to edit. This should inform our decisions on if or how to improve these messages and unblock workflows for users.

11月8日

Partial blocks are live on Test Wikipedia and Test Wikidata! If you're an admin on another wiki and would like to test the functionality please write a message on our talk page.

This first feature set is limited: admins can block an user or IP from editing up to 10 specified pages. There are some known defects that we're currently working on (for example, if an admin is partially blocked from a page they can't delete any page.) and we'll get back to building namespace and upload blocks in later November.

If you're testing partial blocks we'd love to hear from you! Drop us a note about your experience with the tool. We're looking specifically for feedback about:

• What is an appropriate limit of the number of pages a user should be blocked from? In the first version limit is 10, but it can any number.
• Are you satisfied with how partial blocks are logged?
• Do we need to change anything that has already been built?
• Is the warning message in the VisualEditor too gentle?

Thank you!

2018年8月22日

As part of our work on Partial Blocks (phab:T2674) we've have determined that we also need to build a system that allows for multiple simultaneous blocks to be set against a single account (user or IP) to allow communities to set different sanctions of different expiration dates. (For example, a user could have an indefinite block from uploading files but a 24-hour sitewide block.) We are referring to this work as multi-blocks and this work can be tracked in phab:T194697. Another round of designs are underway and will be shared next week on the project page.

For those interested in the technical side of blocks, we're holding a technical RFC about database changes we plan to make. A summary of our changes can be found at phab:T199917.

2018年6月28日

Over the past several months the Wikimedia Foundation's Anti-Harassment Tools team has been working on improvements to blocking tools. We recently added a datetime selector to the Special:Block tool to make it easier to set precise block expirations (phab:T132220). We also upgraded the notice that appears to inform users on mobile devices that they are blocked (phab:T165535). To make blocks stronger, we've expanded cookie blocking to IP blocks to make it more difficult for people to evade their block (phab:T152462).

We investigated building a way for administrators to block users by a hashed combination of browser information but decided it would not be effective without capturing more data during edit sessions (phab:T188160). Because of this we've decided to not pursue this feature at this time. Rather, we've prepared tickets to give CheckUsers the ability to block by IP address or IP range and browser user agent (phab:T100070). This work is prepared and ready to build, just awaiting prioritization.

Our team is currently working on building Partial Blocks, or the ability for administrators to block a user from just a specific page, all pages inside a namespace, or from uploading files. We believe this will allow more tactical sanctions to be set for troublesome users who are productive on other parts of the wiki. (phab:T2674) You can follow that project and see designs at Community health initiative/Per-user page, namespace, and upload blocking.

MediaWikiの現在のブロック機能

Currently on Wikimedia wikis, users and IPs can be blocked from editing articles. Blocks prohibit users from editing all pages in all namespaces on the wiki, with the optional exception of the blocked party's user_talk page. Blocks are permissioned by default to administrators and are logged publicly on Special:Log, Special:BlockList, and Special:Block.

Similar to blocks, global account locks prohibit users from logging-in to any Wikimedia wiki, and global blocks prohibit users from logging-in to any Wikimedia wiki, and global blocks can be set against IP addresses.

自動ブロックを利用者名ブロックに適用すると、違反した利用者が使ったIPアドレスを24時間、自動的にブロックします。

問題 1. 利用者名またはIPアドレスによるブロックは手慣れた利用者によりブロック逃れされやすい

Blocks can be set against a username, IP address, or IP range. IP addresses can be easily spoofed or changed via proxies. The barrier to create a new account is very low and easily circumventable. The Wikimedia movement values openness and privacy, so we must balance walling off bad actors against keeping our platform accessible to good-faith newcomers.

We could implement new blocking techniques that use different, more modern pieces of identification technology. These features will need to comply with our Privacy Policy and Terms of Use.

提案されている解決案:

• Block by user agent (including CheckUser search)
• Block by device ID (including CheckUser search)
• Global blocks for usernames
• Add "Prevent account creation" to global block
• Cookie blocking for anons
• Add a way to extend autoblock to longer than 1 day
• Proactive globally block open proxies (or build a system that shares their IPs cross-wiki)
• Hash personally identifiable data to surface as a percentage match to CheckUser
• AI that compares editing patterns and language to predict possible sockpuppets
• Identify sockpuppets by typing patterns (e.g. rhythm/speed), network speed, and editing patterns (e.g. time of day, edit session length, categories of pages edited)
• Display all contributions made within an IP range on one feed (aka 'Range Contributions')
• Extend Nuke to IP ranges

問題 2. 強力なブロックは、問題のない善意の第三者を巻き添えにして編集できなくしうる

Many IPs and IP ranges are shared by multiple users (e.g. libraries, schools, office buildings) and most individual IPs can (and will) be reassigned by ISPs to other users. If one bad actor gets the IP or IP range blocked, other users cannot edit. Some IP blocks allow for logged-in editing, and good usernames can be whitelisted from IP blocks that prohibit logged-in editing.

We could implement new features that prohibit IPs from editing or creating throwaway accounts, but allow good faith bystanders to still create accounts and productively edit.

提案されている解決案:

• Require all accounts created in an IP range to confirm their email address before editing.
• Prevent the use (or flag incidents) of blacklisted email addresses from being associated with new user accounts
• Throttle account creation and email sending per browser as well as IP address
• Require email address to be unique for edits in certain IP ranges (potentially requiring whitelisted email domains)
• Allow CheckUsers to compare hashed email addresses
• Build AI that automatically sets a block length and type based on UserAgent, IP and/or email
• Require two-factor authentication for edits in certain IP ranges
• Convert Twinkle and/or Huggle from gadgets to extensions, increase their accuracy

問題 3. 全面ブロックはかならずしも適切な措置ではない場合がある

Smaller, more tactical blocks may defuse situations while retaining constructive contributors. On some wikis such as English Wikipedia, this concept is dictated by bans. However, technical means to enforce bans are currently limited, and consequently a user may unnecessarily be blocked from editing the wiki as a whole.

Full-site blocks are akin to a sledgehammer. How can we build fly-swatters to prevent a user from causing limited harm while keeping them a part of the wiki.

提案されている解決案:

• 利用者をブロックする際に...
  • ...個別ページを編集できなくする
  • ...特定カテゴリ内の全ページを編集できなくする
  • ...特定名前空間を編集できなくする
  • ...ページの新規作成をできなくする
  • ...ファイルの投稿をできなくする
  • ...ノートページ以外は編集できなくする
  • ...ホワイトリスト以外のページを編集できなくする
  • ...特別:投稿記録を閲覧できなくなる
  • ...ほかの利用者のウィキメールを送ったりping（通知）したりできなくする
• 管理者が　どのpermissions（実行可能行為）をブロックするか、正確に特定できるようにする
• 管理者が利用者の自動承認を一時的に取り消すことができるようにする
• 特定利用者の全編集を 要査読にする
• 利用者が特定ページ（教育モジュール、利用者会話ページなど）を読めば解除されるブロック
• Allow admins to throttle a user's edits to a maximum number per day/hour/etc
• Build a version AbuseFilter that runs on all edits of specified users to create custom, complex blocks
• Tool to prevent users from writing about themselves.
• User masking systems to obfuscate or ‘hide’ users from each other on wiki

問題 4. ブロックを実施し、監視し、運用するツール群に改善の余地がある

The existing blocking tools (Special:Block, the API, Twinkle, Special:BlockList, etc.) are used daily by numerous users across all Wikimedia wikis. Using these tools can be time intensive, so we would like to explore ideas of how we can simplify the workflows to set or modify a block, monitor block logs, and check the status or details of a block.

提案されている解決案:

• When leaving a warning on a user talk page, display how many other warnings have ever been given to that user.
• Twinkle should automatically know the appropriate warning template to use on that user.
• Log bans like blocks, which could result showing the information on their user page, contributions, or autogenerate a list of all banned users.
• Allow CheckUsers to watch specific IPs
• Allow admins to annotate previous blocks as accidental
• Allow admins to set a block date range via datetime selector
• Allow admins to set different expiration times for blocking editing vs. account creation
• Allow admins to oversight usernames while blocking them
• Display block expirations in logs
• Display a warning on the block page when admins are blocking a sensitive IP
• Special:Block could suggest block length for common policy infractions
• Improved way to set mass blocks
• Block appeal process could be improved to reduce the work required for admins
• Display if a user is currently blocked on another wiki on Special:Block
• Mobile block notices are abysmal
• Allow admins to ‘pause’ a block so the user can participate in on-wiki discussions

関連ページ

• /Links — A list of links on Meta Wiki, MediaWiki.org, and Phabricator about existing blocking tools or suggestions for improvements.
• /English Wikipedia policies — A list of links on English Wikipedia about blocking policies or tools, and talk page conversations about improvements.
• /Block notices — Data about how often the "you are blocked" notices appear to people attempting to edit a wiki.
• Community health initiative/Editing restrictions — The WMF's Anti-Harassment Tools team's documentation page about how new tools could support the socially enforced editing restrictions used by English Wikipedia.
• Community health initiative/Partial blocks — Project page for partial blocks, which allow admins to prevent a user from editing specific page(s) or namespace(s).