Steward requests/Global permissions/2019-12

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search
Warning! Please do not post any new comments on this page. This is a discussion archive first created on 01 December 2019, although the comments contained were likely posted before and after this date. See current discussion.

Requests for global rollback permissions

Requests for global sysop permissions

Global sysop for WhitePhosphorus

The following request is closed.
Not ending before 12 December 2019 16:44 UTC

Hi. I would like to request for global sysop toolkits to help deal with the spambots and vandals, and do some interface maintenance as well on small wikis.

I have been serving as interface admin and sysop on both zhwiki and zhwikibooks since 2017, which are typical large and small wikis respectively, from that I gained adequate experience mainly on anti-vandalism, abusefilter, templates and interface editing. I'm also a sysop of zhwikiversity but more focus on fighting against occasionally appearing LTAs there. I carried out a lot anti-vandalism work globally especially after obtained global rollback permission on Oct. 2019, with the aid of various handy tools like SWViewer and TwinkleGlobal. You can find me on cvn, gs and stewards IRC channels too.

My language knowledge generally covers Chinese and several of its dialects/variants (besides English for communication), and I live in UTC+8 timezone now (may change in future but will still make up a significant proportion). Thus, I hope I could supply the GS team with more diversity.

I have already enabled 2FA since I'm a local interface admin. Regards, WhitePhosphorus (talk) 16:44, 28 November 2019 (UTC)

  • Symbol strong support vote.svg Strong support Yes!-MrJaroslavik (talk) 20:52, 28 November 2019 (UTC)
  • Symbol strong support vote.svg Strong support We need more active and competent GS to counter attacks by LTAs! Keep up the good work! Masum Reza 22:51, 28 November 2019 (UTC)
  • Support Support --Novak Watchmen (talk) 06:17, 29 November 2019 (UTC)
  • Support Support -- CptViraj (📧) 08:39, 29 November 2019 (UTC)
  • Symbol strong support vote.svg Strong support -- (Talk/留言/토론/Discussion) 08:49, 29 November 2019 (UTC)
  • Support Support Obviously capable, with a caveat that if you need to edit interface, that may be out of the traditional scope of GS which is to deal with clear crosswiki vandals and it will be better to apply the Global Interface Editor group as well. Thanks for serving. --Camouflaged Mirage (talk) 13:33, 29 November 2019 (UTC)
    • Thanks for the admonition, I know the scope and would like to handle some GS wiki interface related requests in SRM (e.g. this and this one) if elected, and will leave it to local IAs if there are active ones. In general, I'd like to serve as a backup IA on small wikis and be called on necessary, but don't have a specific task to deal with so not going to run for GIE yet :) --WhitePhosphorus (talk) 13:52, 29 November 2019 (UTC)
  • Support Support Vermont (talk) 15:09, 29 November 2019 (UTC)
  • Support. —Sgd. Hasley 16:27, 29 November 2019 (UTC)
  • Support Support per Vermont. -- Несмир Кудилович (разговор) 20:33, 29 November 2019 (UTC)
  • Support Support --Rschen7754 20:34, 29 November 2019 (UTC)
  • Support Support--eldarado 20:53, 29 November 2019 (UTC)
  • Symbol strong support vote.svg Strong support --94rain Talk 08:13, 30 November 2019 (UTC)
  • Support Support --Esteban16 (talk) 12:50, 30 November 2019 (UTC)
  • Support SupportAjraddatz (talk) 15:01, 30 November 2019 (UTC)
  • Support Support competent and trusted. ‐‐1997kB (talk) 04:33, 1 December 2019 (UTC)
  • Support Support --BRP ever 04:36, 1 December 2019 (UTC)
  • Support Support Valid use case, looks fine to my eyes. Leaderboard (talk) 16:38, 1 December 2019 (UTC)
  • Support Support — Tulsi Bhagat (contribs | talk) 03:32, 2 December 2019 (UTC)
  • Symbol strong support vote.svg Strong support ~riley (talk) 03:35, 2 December 2019 (UTC)
  • Symbol strong support vote.svg Strong support -J. Ansari Talk 09:00, 2 December 2019 (UTC)
  • Support Support--Turkmen talk 11:57, 2 December 2019 (UTC)
  • Support Support Trusted --Geonuch (talk) 04:11, 3 December 2019 (UTC)
  • Support Support Jianhui67 talkcontribs 11:21, 4 December 2019 (UTC)
  • Support Support No red flags, trusted. --Kostas20142 (talk) 20:24, 4 December 2019 (UTC)
  • Support Support(o´ω`o)و盯白磷--Zyksnowy (talk) 15:35, 5 December 2019 (UTC)
  • Support SupportAmmarpad (talk) 18:38, 5 December 2019 (UTC)
  • Support Support -FASTILY 03:14, 6 December 2019 (UTC)
  • Support Support sysop on significant project. Global sysop is not a big deal at all, so should be granted on request when there is a potential use and trust has been established in the primary language group. TonyBallioni (talk) 23:09, 7 December 2019 (UTC)
  • Thank you for your helping. --Sotiale (talk) 14:19, 8 December 2019 (UTC)
    @Sotiale: I take it you support this candidate? Masum Reza 14:31, 8 December 2019 (UTC)
    Of course, my opinion is in favor. Stewards can know my opinion without {{s}} template. --Sotiale (talk) 14:39, 8 December 2019 (UTC)
  • Support Support--𐐎ℹ𝕜ⅈ𝕭𝒂𝕪ⅇ𝕣 👤💬 08:20, 10 December 2019 (UTC)
  • Symbol strong support vote.svg Strong support--Streetdeck Talk) 11:02, 10 December 2019 (UTC)
  • Symbol strong support vote.svg Strong support. —— Eric Liu留言百科用戶頁 12:25, 10 December 2019 (UTC)
  • Support Support --DannyS712 (talk) 03:12, 12 December 2019 (UTC)
    • Yes check.svg Done, clear consensus. Trijnsteltalk 23:08, 12 December 2019 (UTC)

Requests for global IP block exemption

Global IP block exempt for Majavah

Hello. I would like to request a global IP block exemption to use a VPN while editing over a public network. I already have local exemption on the English Wikipedia, however I do sometimes need to edit other wikis, such as Commons or Wikidata. Best regards, Majavah (talk) 18:17, 29 November 2019 (UTC)

Yes check.svg Done Ruslik (talk) 21:03, 2 December 2019 (UTC)

Global IP block exempt for 沈澄心

I am a user from Mainland China, so I can't visit some Wikimedia project without the help of proxy tools. I want to contribute to Chinese Wikiquote, which is blocked in Mainland China now, but there is no local IP block exempt policy on that wiki. I also want to edit another Wikipedia project, especially enwiki and jawiki. Could you please give me a global IPBE? Thanks! (I can visit these wikis by using Accesser, with whose help I can edit Wikipedia without IPBE. However, this tool cannot run on Android phones currently.) -- 05:49, 1 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:44, 3 December 2019 (UTC)

Global IP block exempt for 李瞬生

Hello, I'm a user from Mainland China, where Wikipedia is technically prohibited. I cannont visit the sites without the help of proxy tools. However, all of the tools I can find is blocked from editting Wikipedia. Gained the IPBE of zhwp though, I'm looking forward to a global IPBE to edit any Wikipedia project, especially enwiki and jawiki. Thanks.--李瞬生 (talk) 10:55, 30 November 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:42, 3 December 2019 (UTC)

Global IP block exempt for Painjet

I am a user from Mainland China and already have IP block exempt for zh.wikipedia.org. I'd like to upload some pictures to commons.wikipedia.org, where my account has been blocked recently. I will appreciate it if you could give me the Global IP block exempt. --Painjet (talk) 12:13, 2 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 17:42, 4 December 2019 (UTC)

Global IP block exempt for Wcr1993

I am a user in mainland China. Because of the great firewall, I had to use an agent to visit wiki. I applied for the exemption from the Chinese IP ban of Wikipedia and succeeded. Recently, I found that wikishare resources could not upload documents. I found that IP was banned and could not upload any documents. So I applied for the IP global exemption to facilitate the upload of documents in wikishare resources. Thank you! --Wcr1993 (talk) 13:20, 4 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 18:00, 7 December 2019 (UTC)

Global IP block exempt for Zyksnowy

我是個來自中國大陸地區的人,經常使用開放代理來訪問維基媒體網站。例如:維基數據,維基共享。。最近防火長城封鎖了維基共享資源,元維基
I am a user from mainland China and often have to use an open proxy to access wikimedia sites. For example: Wikidata, Wikicommoms....
謝謝Thanks♪(・ω・)ノ
Thanks, --Zyksnowy (talk) 15:11, 5 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 18:03, 7 December 2019 (UTC)

Global IP block exempt for Huhu9001

I am from mainland China and often have to use an open proxy to access wikimedia sites (By saying "often" I mean GFW's block of wikimedia sites is quite random). Although I already have exemptions in en:wp and en:wt, it is still inconvenient when sometimes I want to edit other might-be related projects like en:ws or ja:wp, or to upload files. Thus I apply for an global exemption. Thanks, --Huhu9001 (talk) 10:12, 5 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 18:02, 7 December 2019 (UTC)

Global IP block exempt for Luis2019-2

This user is blocked globally, but will have a IP Global Block from this user blocked globally, thanks, --Luis2019-3 (talk) 17:41, 7 December 2019 (UTC)

X mark.svg Not done. Account is locked and should not edit anyway. Is it your account? -- Tegel (Talk) 17:42, 7 December 2019 (UTC)
Oppose Oppose, but it will have a IP Global Block for 144.178.134.54. --Luis2019-3 (talk) 17:44, 7 December 2019 (UTC)
That IP-address is not globally locked. -- Tegel (Talk) 17:46, 7 December 2019 (UTC)

Global IP block exempt for Iphoneuser88

<I live in China. I can not edit many wikipedia because firewall>, thanks, --Iphoneuser88 (talk) 18:12, 6 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:35, 8 December 2019 (UTC)

Global IP block exempt for Lab06 N

I am from mainland China and need to use a proxy, thanks. --Lab06 N (talk) 07:40, 8 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:42, 9 December 2019 (UTC)

Global IP block exempt for Hindusanatandharma

I am new in here,I cant save or edit anything. Please dont what I was done any wrong. Please help me to edit. thanks, --Hindusanatandharma (talk) 14:09, 9 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 09:33, 11 December 2019 (UTC)

Global IP block exempt for IP Range of WikiLoop Battlefield

Statement

I am a developer, and we are building a counter-vandalism tool called WikiLoop Battlefield, and here is its source code. We recently start to roll out Oauth login and in-place revert feature. When we move our test from localhost to our dev and canary(staging) environment, we noticed that we received the following error.

{ "error": { "code": "globalblocking-ipblocked-range", "info": "'''Your IP address is in a range which has been blocked on all wikis.''' The block was made by [//meta.wikimedia.org/wiki/User:Jon_Kolbert Jon Kolbert] (meta.wikimedia.org). The reason given is ''[[NOP|Open Proxy]]: Webhost: Contact [[m:Special:Contact/stewards|stewards]] if you are affected ''. * Start of block: 2019-07-23T12:01:56 * Expiration of block: 2021-01-23T11:01:56 You can contact [//meta.wikimedia.org/wiki/User:Jon_Kolbert Jon Kolbert] to discuss the block. You cannot use the \"Email this user\" feature unless a valid email address is specified in your [[Special:Preferences|account preferences]] and you have not been blocked from using it. Your current IP address is 3.86.232.24, and the blocked range is 3.86.0.0/16. Please include all above details in any queries you make.", "*": "See https://en.wikipedia.org/w/api.php for API usage. Subscribe to the mediawiki-api-announce mailing list at <https://lists.wikimedia.org/mailman/listinfo/mediawiki-api-announce> for notice of API deprecations and breaking changes." }, "servedby": "mw1346" }

We host our server on Heroku, does it mean that the IP address of heroku is being blocked globally for MediaWiki API? Can we apply to be whitelisted for our legit use-case?

Thank you!

Xinbenlv (talk)

Responses

@Xinbenlv: Heroku is a shared host, and Wikimedia discourages hosting service in third-party shared hosts (it may host VPN or reverse proxy, which can hide users' IP address). You should either:
  • Move the project to Toolforge (recommended) or Cloud VPS
  • Create a edit service in Toolforge similar to toollabs:widar, and invoke the service (you must use GET or JSONP, Cloud does not support POST from third-party service) in the project (not recommended, this may have security issues)

--GZWDer (talk) 18:41, 17 October 2019 (UTC)

@GZWDer: thank you.
First sorry I just noticed I didn't use the template (which doesn't apply to IP range extemption for al IPs), I updated it.
Second, here we are building an app that requires a user to login with Oauth. We only conduct edit on-behalf of loged-in users and their username will show up.
3rdly, with respect to your suggestion, We've considered porting the project to Toolforge but we are waiting for the Toolforge to support modern Kubernates https://phabricator.wikimedia.org/T214513.
It is not particularly feasible for all users to rely on IP addresses because as many of people who submit for permissions here, IP addresses are only largely available in USA and a few developed countries who took part in early Internet infrastructure development discussions. Many other countries they have to rely on NAT that shares limited IP addresses. Our app hope to expand to all language locales to help users with counter-vandalism efforts. If we block IP addresses, it will reduce the access of these users from Non-USA/developed countries who would like to help.
In summary, can we apply for unblocking any IP addresses if we have allowed users to identify themselves with login? Thank you!

Xinbenlv (talk) 21:21, 17 October 2019 (UTC)

all, I don't know who to send this argument to... Xinbenlv (talk) 10:36, 25 October 2019 (UTC)
I start a discussion en:User:Xinbenlv/Propose:Allow_Login_Users_By_Default_When_IP_Range_Blocked
There is a block configurations to let logged in users edit while on blocked IP: However we usually do not allow it on NOP blocks. We cannot let anyone using your tool be exempt from the block, this is a software restrictions. There's just no way to do that. And since we are not going to unblock AWS — thus Heroku — I think your only bet is to follow GZWDer's advice. — regards, Revi 07:54, 4 November 2019 (UTC)
@-revi:, @GZWDer: thanks for answering. How about the following solutions sound to admins?
  1. if we use certain way to crypt-sign a request from our app's server, can you grant app-specific exception for this use-case? (rather than unblocking all IP-addresses but unblockgin all users who have signed in and use our app)?
  2. if we managed to find a fixed IP address, can you unblock individual IP address of the one that we use for our webapp?
Xinbenlv (talk) 22:37, 4 November 2019 (UTC)
#1: There's no such feature(tm) to do so. #2: I think I can do that, with two conditions: You notify us when you stop your project (thus releasing the IP to the shared pool) and you absolutely always require authentication. — regards, Revi 04:40, 5 November 2019 (UTC)
@-revi: thank you! Yes. We are likely to use at most 3 IP addresses at this moment:
  • 35.222.141.110 for dev
  • 34.67.56.51 for canary (staging)
  • 34.69.252.115 for prod
and I agree to both terms: we will absolutely require authentication(in fact you can just allow only login users to edit from these IP addresses) and we will notify you when we stop project and release the IP to the shared pool. (once the Toolforge support mount on Root or custom domain, or we are approved for WMF Cloud VPS)
Xinbenlv (talk) 06:13, 5 November 2019 (UTC)
Note individual IPs can not be globally whitelisted (phab:T42439). They can only be whitelisted locally.--GZWDer (talk) 19:58, 5 November 2019 (UTC)
@GZWDer:, thank you!
Do I understand it correctly that both the global and local needs to unblock the IP for any IP address to be used? While I will work on applying for individual local wiki's IP whitelist approve, can I ask why individual IPs can not be globally whitelisted? In particular, is it a policy or a technical reason?
  1. If it's a policy, I'd argument by fixing the static IP, it's no longer an Open Proxy since being reserved and occupied by an application, a random internet user cannot use it. Given that we promise that we only authenticate users, it's a fixed set of users (only registered Wikipedian users) rather than open to public.
  2. If it's a technical issue, I'd argument previously we are blocking IP range IP1 to IP3, now if we have a static IP2 to unblock, you can block [IP1, IP2), (IP2, IP3]
Dear global admins, what do you think? Thank you!
Xinbenlv (talk) 21:35, 5 November 2019 (UTC)
Please let me know if there are other information you would love me to provide accompanying this application Xinbenlv (talk) 22:49, 7 November 2019 (UTC)
It's a technical reason. We simply cannot globally whitelist individual IP addresses, even if we wanted to. Trijnsteltalk 23:06, 9 November 2019 (UTC)
@Trijnstel: thank you for your answer. Can you help me understand how that is not technically possible? I suggested that you can unblock [IP1, IP2), (IP2, IP3] instead of the range [IP1,IP3]? Or what are alternatives if you could kindly suggest? Xinbenlv (talk) 02:54, 10 November 2019 (UTC)
@RonaldB: What can you tell me about the IP address 3.86.232.24? Currently the whole /16 IP range has been blocked and I don't think it's possible/desired to unblock a part of it, but perhaps you can advice? Trijnsteltalk 18:47, 10 November 2019 (UTC)
@RonaldB:, @Trijnstel:, @GZWDer:, @-revi:, thank you, do I understand it correctly that you are helping us to find the technical solutions because there is no other concerns in the policy aspects right? If there are policy concern, could we discuss policy concern in the meanwhile? Xinbenlv (talk) 00:41, 15 November 2019 (UTC)
@Trijnstel:, the range 3.0.0.0/9 (and that includes 3.86.232.24) belongs to Amazon AWS (not the shop, but the server hosting part of that corporation). That is a very large range and I'm pretty sure that there are thousands of much smaller ranges included, altogether used for cloud hosting/services. On nlwiki I don't block the whole /9, but when I notice abuse and suspect a VPN behind that, I block a /16 within that /9 range. Not sure, but something similar might have happened in this case as well. - Rgds RonaldB (talk) 00:50, 25 November 2019 (UTC)
X mark.svg Not done The request has nothing to do with global ip block exemptions as they can only apply to specific accounts. Ruslik (talk) 09:41, 11 December 2019 (UTC)

Global IP block exempt for Lifehome

Hi everyone, I am from Hong Kong and during the past six months, the government has implicitly harden their internet censorship, and also due to the social movement, ISPs are not trustworthy as they were in the past, as government can block and/or intrude network traffics.

For now I use multiple VPN and circumvention to browse multiple language of wikipedia, it is however, especially using Tor, I will run into difficulties that I cannot browse Wikipedia or WikiCommons normally. Thus I am hoping to apply the status of global IP block exemption, thank you very much. Lifehome (talk) 15:20, 10 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 09:35, 11 December 2019 (UTC)

Global IP block exempt for MrBingxin

I have to use proxy to edit wikipedia, because i'm living China.so i need some help, thanks. --MrBingxin (talk) 14:24, 12 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 11:54, 13 December 2019 (UTC)

Requests for global rename permissions

Requests for 2 Factor Auth tester permissions

2FA Tester for Agucova

My account has been compromised before, and I would like to have 2FA as an extra method of authentication. I'm fine with testing, thanks in advance, --Agucova (talk) 18:32, 3 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 19:11, 3 December 2019 (UTC)

2FA Tester for Mezzomix

2FA is highly recommended on a public site like wikipedia - so please enroll me, thanks, --Mezzomix (talk) 15:45, 3 December 2019 (UTC)

Have you read the documentation? Ruslik (talk) 19:12, 3 December 2019 (UTC)
Yes. I have the technical background & Apps installed to use it. Mezzomix (talk) 08:47, 4 December 2019 (UTC)
Yes check.svg Done Ruslik (talk) 17:40, 4 December 2019 (UTC)

2FA Tester for Mercy11

Hi. I have read the Help page. Requested for added security, thanks, --Mercy11 (talk) 10:13, 6 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:52, 6 December 2019 (UTC)

2FA Tester for Felibb

Hi. I have read the Help page. Requesting 2FA for added security, thanks, --Felibb (talk) 16:19, 7 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 18:12, 7 December 2019 (UTC)

2FA Tester for Literae7

Read Help page, needed for added security and protection, thanks, --Literae7 (talk) 12:38, 7 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 18:08, 7 December 2019 (UTC)

2FA Tester for ShreyasMinocha

Hi. Please enable 2FA for my account. I have read the Help page. Thanks. —ShreyasMinocha (talk) 16:59, 7 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 18:41, 7 December 2019 (UTC)

2FA Tester for Centrixx

Hello, I'm trying to enable 2FA wherever I can and have read the help page, thanks, --Centrixx (talk) 19:08, 8 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:34, 8 December 2019 (UTC)

2FA Tester for chitta

I have read the Help Page. Seeing increased password resets on my account.

Yes check.svg Done Ruslik (talk) 20:35, 8 December 2019 (UTC)

2FA Tester for GSK

Received an email notification that my account had multiple attempted logins, so better safe than sorry; this is an account I'd rather not lose. I have read the Help page, thanks, --GSK (talk) 20:33, 10 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 20:51, 10 December 2019 (UTC)

2FA Tester for MTCoster

My password manager suggested that I should set up 2FA for my Wikipedia account, which I didn't realise was an option until I looked into it! I've read through the help page already. Thanks, --MTCoster (talk) 21:40, 10 December 2019 (UTC)

Yes check.svg Done Ruslik (talk) 09:30, 11 December 2019 (UTC)

Requests for other global permissions

remove global OTRS member for Xxmarijnw

Thanks, --Krd 08:35, 1 December 2019 (UTC)

Yes check.svg Done.--HakanIST (talk) 12:27, 1 December 2019 (UTC)

Remove global renamer and global rollback for Renamed user uofgjwfojfowubwofemipvwjboiw

Vanished accounts should not be used. I propose to remove the user's global renamer and global rollback flag. It may be restored if the user returns. --GZWDer (talk) 14:05, 2 December 2019 (UTC)

Please also remove global OTRS member. --Krd 14:16, 2 December 2019 (UTC)

And please delete my user page, user talk page and rights in all wiki if you can. Sorry I have to request this because of safe. Thank you. --Catherine Laurence discussion 14:50, 2 December 2019 (UTC)

Synchbox can be used for the deletions --DannyS712 (talk) 16:55, 2 December 2019 (UTC)
Yes check.svg Done, for all three. And I concur with DannyS712 for the deletions. Trijnsteltalk 19:26, 3 December 2019 (UTC)

remove global OTRS member for Hephaion

Thanks, --Krd 10:16, 3 December 2019 (UTC)

Done. Matiia (talk) 13:48, 3 December 2019 (UTC)

remove global OTRS member for Yann

Thanks, --Krd 17:05, 9 December 2019 (UTC)

Yes check.svg Done --Schniggendiller (talk) 17:11, 9 December 2019 (UTC)