Talk:Spam blacklist

From Meta, a Wikimedia project coordination wiki
This is an archived version of this page, as edited by Lustiger seth (talk | contribs) at 07:00, 27 June 2023 (→‎bitly.com: testing done). It may differ significantly from the current version.

Latest comment: 10 months ago by Lustiger seth in topic Proposed removals
Shortcut:
WM:SPAM
WM:SBL
The associated page is used by the MediaWiki Spam Blacklist extension, and lists regular expressions which cannot be used in URLs in any page in Wikimedia Foundation projects (as well as many external wikis). Any Meta administrator can edit the spam blacklist; either manually or with SBHandler. For more information on what the spam blacklist is for, and the processes used here, please see Spam blacklist/About.

Proposed additions
Please provide evidence of spamming on several wikis. Spam that only affects a single project should go to that project's local blacklist. Exceptions include malicious domains and URL redirector/shortener services. Please follow this format. Please check back after submitting your report, there could be questions regarding your request.
Proposed removals
Please check our list of requests which repeatedly get declined. Typically, we do not remove domains from the spam blacklist in response to site-owners' requests. Instead, we de-blacklist sites when trusted, high-volume editors request the use of blacklisted links because of their value in support of our projects. Please consider whether requesting whitelisting on a specific wiki for a specific use is more appropriate - that is very often the case.
Other discussion
Troubleshooting and problems - If there is an error in the blacklist (i.e. a regex error) which is causing problems, please raise the issue here.
Discussion - Meta-discussion concerning the operation of the blacklist and related pages, and communication among the spam blacklist team.
#wikimedia-external-linksconnect - Real-time IRC chat for co-ordination of activities related to maintenance of the blacklist.
Whitelists
There is no global whitelist, so if you are seeking a whitelisting of a url at a wiki then please address such matters via use of the respective Mediawiki talk:Spam-whitelist page at that wiki, and you should consider the use of the template {{edit protected}} or its local equivalent to get attention to your edit.

Please sign your posts with ~~~~ after your comment. This leaves a signature and timestamp so conversations are easier to follow.


Completed requests are marked as {{added}}/{{removed}} or {{declined}}, and are generally archived quickly. Additions and removals are logged · current log 2024/05.

SpBot archives all sections tagged with {{Section resolved|1=~~~~}} after 7 days and sections whose most recent comment is older than 10 days.

Proposed additions

This section is for proposing that a website be blacklisted; add new entries at the bottom of the section, using the basic URL so that there is no link (example.com, not http://www.example.com). Provide links demonstrating widespread spamming by multiple users on multiple wikis. Completed requests will be marked as {{added}} or {{declined}} and archived.

Nanașu47, Dellmatron et. al

blacklisting




































































































































Some of the reports are missing data - the key users are Nanașu47 and Dellmatron. See Talk:Wikiproject:Antispam#Nanașu47, Dellmatron et. al. MER-C 10:27, 11 June 2023 (UTC)Reply

@MER-C: Added Added to Spam blacklist. -- — billinghurst sDrewth 05:08, 13 June 2023 (UTC)Reply

not blacklisting





These two need some review through usage, not blacklisting at this time  — billinghurst sDrewth 05:07, 13 June 2023 (UTC)Reply

These should now be clean apart from the single legitimately added link (the airadvisor results are stale). MER-C 18:27, 16 June 2023 (UTC)Reply
@Billinghurst: MER-C 09:37, 17 June 2023 (UTC)Reply
 Declined set to be monitored  — billinghurst sDrewth 11:43, 18 June 2023 (UTC)Reply

third batch















These from the third batch need usage review. MER-C 09:37, 17 June 2023 (UTC)Reply

Batch 3















See reports. MER-C 09:37, 17 June 2023 (UTC)Reply

…profy.com

























A whole range of spam, predominantly through the cyrllic wikis, though not always that restricted. Part of a continued spam set that emanates from a wide range of IPs typically from one provider. [Known to occur, watched, and some filters catch some of it, and we curate the remainder] Plan is to block the stem in this situation and deal with any legitimate uses of that stem by modifying the regex to be gentler.  — billinghurst sDrewth 03:06, 19 June 2023 (UTC)Reply

@Billinghurst: Added Added to Spam blacklist as profy\.com -- — billinghurst sDrewth 03:07, 19 June 2023 (UTC)Reply

backlinko.com



Spam at [1] [2] [3] [4] [5] [6] [7] [8] [9] [10] [11] [12] [13] [14] [15]. Đơn giản là tôi (talk) 15:58, 19 June 2023 (UTC)Reply

Comment Comment @Đơn giản là tôi: Linking to articles is not particularly helpful for a report of alleged spam. We would need to see the link additions themselves to properly assess whether they are being abused by an individual or a group of individuals The argument of whether they are reliable sources is a different argument and one that needs to be better supported by cogent argument, rather than linking.

I do understand the concerns and they that they should be raised on specific articles. I believe that we should monitor the site for evidence of future abuse, I don't think that we have demonstrated a case for addition to the spam blacklist.  — billinghurst sDrewth 23:28, 19 June 2023 (UTC)Reply

@Billinghurst Thanks for your opinion. I will find out more and reply later. Đơn giản là tôi (talk) 05:54, 20 June 2023 (UTC)Reply
Just saw this section, I agree with Billinghurst [16].
Don't think the link should be used as a source but it seems to me it was used mostly by good faith editors (probably not realising about the nature of this link). Johannnes89 (talk) 20:36, 20 June 2023 (UTC)Reply
@Đơn giản là tôi:  Declined does not clearly might criteria for blacklist; set to be monitored by COIBot  — billinghurst sDrewth 23:50, 23 June 2023 (UTC)Reply

blog.zolnai.ca





Spammed on his page see Do Tri ✓ 💬 05:50, 20 June 2023 (UTC)Reply

@MTRIProd:  Declined We do not globally blacklist a domain for a single link at a single site. We are not here to take over the role of a site to manage their links and their users. We are not controlling editors at this page, that is the task of the community. Please take a step back and think about the purpose of this page and all other global aspects of metawiki. Assuming good faith has to be our starting point.  — billinghurst sDrewth 00:48, 21 June 2023 (UTC)Reply

bongdalu









JohnyCuTis (talk) 23:39, 23 June 2023 (UTC)Reply

@JohnyCuTis: Added Added to Spam blacklist.; extra domain added by me and I will manage it through a broader regex as it seems they like to utilise different TLD to the same SLD name -- — billinghurst sDrewth 23:52, 23 June 2023 (UTC)Reply

qiuwenbaike.cn



Alias of qiuwen.wiki, which is blacklisted in 2022. This site is controlled by foundation-banned individuals, according to the WMF: "[W]ikis hosted by the Foundation should not link to Wikimedia-related spaces controlled by people listed on the WMF Global Ban policy. Foundation bans cover those spaces, both offline and online". (https://zh.wikipedia.org/w/index.php?diff=67716329) --BlackShadowG (talk) 06:46, 24 June 2023 (UTC)Reply

@BlackShadowG: Why hasn't this been resolved at zhWP? Defer to w:zh:Mediawiki talk:spam-blacklist  — billinghurst sDrewth 07:41, 24 June 2023 (UTC)Reply
@Billinghurst: OK I'll report this on zhWP. But as WMF doesn't allow this site to be added on any Foundation-hosted wiki, perhaps whether zhWP blacklists it won't be a barrior of its addition to global blacklist? BlackShadowG (talk) 15:22, 24 June 2023 (UTC)Reply
@BlackShadowG: Sure, not my argument. The community closest to the problem should have the ability to do all the research and guarantee that there is a true issue and to act. Global blacklist is for the resolution of global problems, not to circumvent community on local issues.  — billinghurst sDrewth 23:25, 24 June 2023 (UTC)Reply

cakhia



Spam at ang.wiki: [21]




Spam at uz.wiki: [22]




Spam at id.wiki: [23]




Spam at en.wiki: [24].
JohnyCuTis (talk) 08:02, 24 June 2023 (UTC)Reply

Added Added  — billinghurst sDrewth 23:57, 24 June 2023 (UTC)Reply

90phut



Spam at war.wiki: [25]




Spam at lt.wiki: [26]




Spam at en.wiki: [27] [28]




Spam at id.wiki: [29] [30]

Bonus: xoilac.group [31]. Cross-wiki spam Chikim.nana (talk · contribs).
JohnyCuTis (talk) 08:00, 24 June 2023 (UTC)Reply

Added Added with a regex that should hopefully cover these variations  — billinghurst sDrewth 00:13, 25 June 2023 (UTC)Reply
Re the user identified, I am willing to AGF at this point, and feel that the communities are able to discuss matters with the user and correct problematic editing.  — billinghurst sDrewth 00:15, 25 June 2023 (UTC)Reply

Proposed additions (Bot reported)

This section is for domains which have been added to multiple wikis as observed by a bot.

These are automated reports, please check the records and the link thoroughly, it may report good links! For some more info, see Spam blacklist/Help#COIBot_reports. Reports will automatically be archived by the bot when they get stale (less than 5 links reported, which have not been edited in the last 7 days, and where the last editor is COIBot).

Sysops
  • If the report contains links to less than 5 wikis, then only add it when it is really spam
  • Otherwise just revert the link-additions, and close the report; closed reports will be reopened when spamming continues
  • To close a report, change the LinkStatus template to closed ({{LinkStatus|closed}})
  • Please place any notes in the discussion section below the HTML comment

COIBot

The LinkWatchers report domains meeting the following criteria:

  • When a user mainly adds this link, and the link has not been used too much, and this user adds the link to more than 2 wikis
  • When a user mainly adds links on one server, and links on the server have not been used too much, and this user adds the links to more than 2 wikis
  • If ALL links are added by IPs, and the link is added to more than 1 wiki
  • If a small range of IPs have a preference for this link (but it may also have been added by other users), and the link is added to more than 1 wiki.
COIBot's currently open XWiki reports
List Last update By Site IP R Last user Last link addition User Link User - Link User - Link - Wikis Link - Wikis
vrsystems.ru 2023-06-27 15:51:16 COIBot 195.24.68.17 192.36.57.94
193.46.56.178
194.71.126.227
93.99.104.93
2070-01-01 05:00:00 4 4

Proposed removals

This section is for proposing that a website be unlisted; please add new entries at the bottom of the section. Use a suitable 3rd level heading and display the domain name as per this example {{LinkSummary|targetdomain.com}}.

Remember to provide the specific domain blacklisted, links to the articles they are used in or useful to, and arguments in favour of unlisting. Completed requests will be marked as {{removed}} or {{declined}} and archived.

See also recurring requests for repeatedly proposed (and refused) removals.

Notes:

  • The addition or removal of a domain from the blacklist is not a vote; please do not bold the first words in statements.
  • This page is for the removal of domains from the global blacklist, not for removal of domains from the blacklists of individual wikis. For those requests please take your discussion to the pertinent wiki, where such requests would be made at Mediawiki talk:Spam-blacklist at that wiki. Search spamlists — remember to enter any relevant language code

bitly.com



Gudn Tach!
Of course, bitly.com can be used just as bit.ly as an short url redirect. So i don't request to unlist the whole domain. However at the moment it's difficult to write articles about bitly.com and adding links to this domain, see e.g. w:en:bitly.com and [32] So I suggest to modify the blacklist entry from

\bbitly\.com\b

to

(?<!support\.)\bbitly\.com/(?!pages/).

(the trailing dot is part of the regexp). This would still block:

https://bitly.com/abc123

but not

https://support.bitly.com/abc123
https://bitly.com/pages/abc123
https://bitly.com
https://bitly.com/

Any objections? -- seth (talk) 07:05, 26 June 2023 (UTC)Reply

Done
and tested successfully: [33].
bitly.com/lalala e.g. is still blocked. -- seth (talk) 07:00, 27 June 2023 (UTC)Reply

Troubleshooting and problems

This section is for comments related to problems with the blacklist (such as incorrect syntax or entries not being blocked), or problems saving a page because of a blacklisted link. This is not the section to request that an entry be unlisted (see Proposed removals above).

Discussion

This section is for discussion of Spam blacklist issues among other users.

Bots can now override the blacklist on Wikimedia projects?

You may have already seen this MediaWiki change but in case not, see:

I think this is a bad idea. --A. B. (talkcontribsglobal count) 02:25, 11 June 2023 (UTC)Reply

I replied there, this is a very bad idea. @Lustiger seth: however, if implemented correctly, it could help with the redirect issue discussed above, give users with given rights the right to override SBL rules for redirects and have a bot replace them with expanded links (and there weed out blacklisted domains as redirect targets). LiWa3/XLinkBot can already detect redirect sites and revert based on that. Dirk Beetstra T C (en: U, T) 04:25, 13 June 2023 (UTC)Reply
Hi Beetstra!
  • I don't understand your objection example at phab:T313107. "if a vandalism edit removes the blacklisted link", then at present we have the same problem, haven't we? (maybe a roll-back can be used to re-add the blacklisted link, but that would not be changed with the proposed patch, would it?)
  • AFAICS the problem at #google.*/url would not be touched by this proposed change. Actually the problem above is that especially new users might use google links, because they don't know about the problems. But the spammers we try to bock are new users, too. So having different rights per user group would not help, i guess.
-- seth (talk) 07:03, 13 June 2023 (UTC)Reply
@Lustiger seth yes, first problem is currently there, but i am very worried that with bots being able to add blacklisted links (think archiving bots and so on) we will have more and more of these problems with vandalised pages where we can’t repair them. Blacklisted links should be removed and/or disabled, not bot-overridden …
Not specifically for the google redirects (which with removal of the rules can be added also maliciously, even if then a bot will replace them), but for all urls. Give a bloverride to people with advanced rights and allow them to add any redirect site again so they can be replaced later by bot. Problem then is (as with bot override only) that they can then also add the links that the community agreed that noone should be able to add.
(Mainly just thinking out loud :-) ). Dirk Beetstra T C (en: U, T) 04:31, 18 June 2023 (UTC)Reply