Help:Abuse filter

From The Vault - Fallout Wiki
Jump to: navigation, search
 
Gametitle-Wiki.png
Gametitle-Wiki.png

The Abuse Filter allows privileged users to set specific controls on actions by users, such as edits, and create automated reactions for certain behaviors.

The extension allows automatic filters/heuristics to be applied to all edits. Specific rules can be developed, such as "users with fewer than 500 edits are blocked from moving pages to titles which match this regular expression: /poop/". Of course, the rules can get quite a bit more complicated.

Log entries and filters are only viewable by sysops. For all filters, a brief, general summary of what the rule targets will be available, and displayed in the log, the list of active filters, and in any error messages generated by the filter.

New abuse filters should be tested for a few days (in "log only" mode) before being brought to full force ("warn", "disallow" or "throttle" modes).

Extension documentation[edit source]

Filtering criteria[edit source]

For all of the following, we can do extensive normalisation, regex matching, length comparison and regular comparisons (less than, greater than, equal to) matching, combining different filters with boolean logic.

User[edit source]

  • Edit count.
  • Account age.
  • Groups.
  • Email-confirmed status.

Titles (moved-to, moved from included)[edit source]

  • Namespace.
  • Title.
  • Full text.
  • Restrictions and protection status.

Action[edit source]

  • The action type (edit, move or createaccount).
  • Edit summary.
  • Contents of the edit.

Throttling[edit source]

  • Filters can specify whether actions done at a certain rate are by the same IP address, account, /16 range, account-creation-date, and/or to the same page, for a consequence (below) to be invoked.
  • Any of the above conditions can be combined to produce a separate rate-limiter. For instance, we can group all accounts created on the same date, from the same /16, for the purposes of rate-limiting.
  • Any actions set for that filter will occur if, and only if, the rate-limiter is tripped. This reduces false-positives by making the filter apply only if the same user is consistently tripping a particular filter, rather than a single false-positive.

Actions which can be assigned in response to filtered edits[edit source]

If a user triggers a filter, AbuseFilter can apply any of the following sanctions based on the severity of the offense:

  • All actions triggering a filter are logged at a special page.
  • The user's action can be tagged for further review.
  • The user can be warned that their actions may be unconstructive.
  • The user's action may be disallowed.
  • The user's account may have its autoconfirmed status removed.
  • The user's account may be blocked from editing, along with all IP addresses used in the last 7 days.
  • The user's account may be removed from all privileged groups (such as sysop, bot, rollbacker).

Monitoring[edit source]

All edits triggering an action will produce a report at Special:AbuseLog. On this page, a brief log entry is entered. Users with the appropriate permissions may view the log summary and view details on the log entry. This includes all information available to the filter when it ran, and may be useful for debugging purposes.

Sample abuse log entries[edit source]

  • 06:43, 23 June 2008: Ausir (Talk | contribs | block) triggered filter 1, performing the action "edit" on Main Page. Actions taken: warn,disallow; Filter description: Test Filter (details)
  • 06:43, 23 June 2008: Ausir (Talk | contribs | block) triggered filter 2, performing the action "edit" on Main Page. Actions taken: none; Filter description: Test Filter (details)
  • 06:42, 23 June 2008: Ausir (Talk | contribs | block) triggered filter 1, performing the action "edit" on Main Page. Actions taken: warn; Filter description: Test Filter (details)
  • 06:42, 23 June 2008: Ausir (Talk | contribs | block) triggered filter 2, performing the action "edit" on Main Page. Actions taken: none; Filter description: Test Filter (details)
  • 06:22, 23 June 2008: Ausir (Talk | contribs | block) triggered filter 1, performing the action "edit" on Main Page. Actions taken: warn,disallow; Filter description: Test Filter (details)
  • 06:22, 23 June 2008: Ausir (Talk | contribs | block) triggered filter 2, performing the action "edit" on Main Page. Actions taken: none; Filter description: Test Filter (details)

Safeguards[edit source]

To protect the wiki against poorly configured filters, a technical limit is imposed on the maximum percentage of actions that will trigger a given filter.

Notification[edit source]

All notifications are based on the template {{mbox mediawiki}}.

Generic warning messages.

Option Message name Message text
Trigger these actions after giving the user a warning
(Default message)
abusefilter-warning
Mbox warning orange.svg
This action has been automatically identified as harmful.
Unconstructive edits will be quickly reverted, and egregious or repeated unconstructive editing will result in your account or IP address being blocked. If you believe this edit to be constructive, you may click Submit again to confirm it.
Prevent the user from performing the action in question abusefilter-disallowed
Mbox warning orange.svg
An automated filter has identified this edit as potentially unconstructive, and it has been disallowed.
Please be aware that vandalism may result in revocation of your editing privileges on The Vault - Fallout Wiki. If you believe this edit to be constructive, you may submit it to sysops for review. A brief description of the abuse rule which your action matched is: $1
Revoke the user's autoconfirmed status abusefilter-autopromote-blocked
Mbox warning red.svg
This action has been automatically identified as harmful, and it has been disallowed.
In addition, as a security measure, some privileges routinely granted to established accounts have been temporarily revoked from your account.
Block the user and/or IP address from editing abusefilter-blocked-display
Mbox warning red.svg
An automated filter has identified this edit as potentially unconstructive, and it has been disallowed.
In addition, to protect The Vault - Fallout Wiki, your user account and all associated IP addresses have been temporarily restricted from executing some operations. A log has been created for review by sysops. If this action is found to be constructive the temporarily restrictions will be removed.
Remove the user from all privileged groups abusefilter-degrouped
Mbox warning red.svg
This action has been automatically identified as harmful.
Consequently, it has been disallowed, and, since your account is suspected of being compromised, all rights have been revoked. If you believe this to have been in error, please contact a bureaucrat with an explanation of this action, and your rights may be restored.

If a filter is set to warn and disallow, then a user clicking "Save page" will alternatively see that warning and standard disallowed message.