Talk:Trust and Safety

From Meta, a Wikimedia project coordination wiki
Jump to navigation Jump to search

Missing content?[edit]

@Kbrown (WMF): Where is the history of this page? It seems to have been moved from 3 May 2018. Blue Rasberry (talk) 13:52, 23 May 2018 (UTC)

@Bluerasberry: Hi Lane, you can find past versions of this department's info page at "Support and Safety" (which now redirects to this page since our team was renamed). Kbrown (WMF) (talk) 14:31, 23 May 2018 (UTC)
@Kbrown (WMF): May I arrange for a history merge of that content to this page? Otherwise I might mark the other page as a historical archive. My aim is to make the older content more accessible. Blue Rasberry (talk) 15:08, 23 May 2018 (UTC)
@Bluerasberry: This is regretfully not easy because of translation woes, but it's also not something we want to do since it would give the impression that this is a name change only - the workflows and such for the team are functionally different. I have instead linked to the old SuSa page from the lede which hopefully should tie it back. Joe Sutherland (Wikimedia Foundation) (talk) 17:38, 23 May 2018 (UTC)
@JSutherland (WMF): That is helpful but is still a nonstandard way to archive. It does not help the image of this group to have that link hanging in the lead and I imagine that in within years the link would need to go.
I do not feel too strongly about this and I cannot read the motivation here about whether this is a bureaucratic issue or whether there is a reason for pulling the content out of the standard archiving practices. If I were doing this I would probably choose one of these common options:
  1. history merge - put the old records in front of these new ones. There is a one-day, one-edit overlap but I think it works.
  2. make the old page live, put it out of the way, and put {{Historical}} on it
I think I will not comment further. This struck me as a ~1 in 10,000 strange incident so I spoke up about it, but I do not have so much of an opinion at this time. Thanks for your responses. Blue Rasberry (talk) 18:35, 31 May 2018 (UTC)
Hey Bluerasberry - Option 1 would be the best option but because of how the translate extension works, it's not really feasible. I agree the solution at present is suboptimal and I can only apologise about that. I think making the old page live is simply going to generate more confusion than a redirect. Joe Sutherland (Wikimedia Foundation) (talk) 00:12, 1 June 2018 (UTC)
@JSutherland (WMF): Is this new way of archiving becoming routine? Do you expect that every time any page on meta gets a revision and has used translation extension then it will be necessary to turn the old page to a redirect, start a new page, and break from the natural MediaWiki archiving systems?
If there is something weird about this case, then that is unfortunate. If this is the new normal for some reason, and this has been happening and is now routine in many places, then I hope we have Phabricator tickets documenting this as a problem in conflict with community norms for archiving, if in fact this is a problem. Do you know of a Phabricator ticket on this issue? Should I file one and post here? I know nothing about this.
Again, I only care a little about this. I did not expect this to be a discussion but I just saw something strange. I would like to resolve this somehow and exit my part in this discussion. Blue Rasberry (talk) 15:55, 1 June 2018 (UTC)
Actually, this is not urgent. I want to step away for now. Thanks. Blue Rasberry (talk) 15:57, 1 June 2018 (UTC)

Locked sysops’ accounts[edit]

Hello.
Of the four sysops’ accounts locked on June 10 only one Perhelion is unlocked by now – the very acc which presumedly infected Commons for the first time, causing other users to be exposed to a malicious script. What do you want from the remaining three guys – to come on foot to your California and submit humble petitions to the Office directly? Is this “safety”? And when will trust return here? @Rxy: also for your information. Incnis Mrsi (talk) 06:00, 12 June 2018 (UTC)

Hi there Incnis Mrsi. All but one of these accounts is now unlocked, since they emailed into us and we could confirm their identities. I would greatly appreciate that, if you know Schekinov Alexey Victorovich, you ask him to email us at ca@wikimedia.org from the email address associated with his account and we can get that one unlocked as well. (See Wikitech for why this process is how it is.) Joe Sutherland (Wikimedia Foundation) (talk) 14:55, 13 June 2018 (UTC)
@JSutherland (WMF): I’m in process of negotiating an intermediary to post a message to his vk.com profile. Would you provide specific instructions to the user? Such as “to clear the browser cache”, “to log on from another device”, or so. Incnis Mrsi (talk) 15:52, 13 June 2018 (UTC)
@Incnis Mrsi: I would just ask him to email us from the email he signed up with if that is possible. It is okay if he does that in Russian. He will not be able to log in until his account is unlocked no matter his browser, cache etc. Joe Sutherland (Wikimedia Foundation) (talk) 18:26, 13 June 2018 (UTC)
The procedure at wikitech:Password reset/Confirming identities was probably developed by competent people, but they assumed some evil-doer who succeeded in stealing or guessing the password, and unlikely envisaged the current situation. No password stealing took place, at least for the three accounts locked after 10:50 (UTC). The accounts were compromised with a backdoor in Special:BotPasswords, and the residual danger is not about the main password, but about malicious scripts which can be inadvertently activated by the rightful owner. It is unfortunate that Trust_and_Safety undertakes some measures which ignore nature of the threat. Incnis Mrsi (talk) 11:40, 14 June 2018 (UTC)

@JSutherland (WMF): Schekinov can’t remember which Email was specified in his main account,[1] whereas Special:EmailUser is disabled for locked accounts. Can you unlock the account for few seconds, use Special:EmailUser/Schekinov Alexey Victorovich and then lock it again? Incnis Mrsi (talk) 18:11, 18 June 2018 (UTC)

Email address[edit]

Does the Trust and Safety team have a general email address for public (non-Wikimedia community) inquiries? There does not seem to be one posted. Blue Rasberry (talk) 13:28, 29 June 2018 (UTC)

Thank you @Bluerasberry:, the vast majority of inquiries our team gets are from within or directly tied to the communities. So there currently is no inbox more general than those serving such purposes. We are also modestly restraint about the public profile the existing ones as the example of answers/business@ demonstrates the considerable spam coming along with having them posted in public. That certainly should be fixed but would probably involve changing the input interface approach to something less ancient than publicly available raw email addresses. Best regards, --Jan (WMF) (talk) 21:15, 1 August 2018 (UTC)
@JEissfeldt (WMF): Thanks. If I understand correctly then anyone seeking escalation to the WMF regarding safety concerns should either reconsider and engage with wiki volunteers or write to legal@wikimedia.org as the only path to speak with WMF staff. Correct me if there is any other procedure in place. This seems resolved though. Blue Rasberry (talk) 22:33, 1 August 2018 (UTC)
Not quite, @Bluerasberry:, as there are workflows where it is very advisable to escalate to the team directly, notably those falling within the scope of emergency@ based on the instructions there. Most daily disagreements of Wikipedian community life, however, fall within the scope of the communities self-governance detailed in the Terms of Use. Respecting the autonomy of a community is important and those cases only reach us if they turn out to be fairly severe, usually meaning the communities can't resolve them on their own. The main pathway for such issues has traditionally been via the functionaries --Jan (WMF) (talk) 16:44, 10 August 2018 (UTC)
Yes check.svg Resolved.
Okay, that works. Blue Rasberry (talk) 16:48, 10 August 2018 (UTC)