https://bugzilla.wikimedia.org/show_bug.cgi?id=18981


Alex Z. <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]




--- Comment #5 from Alex Z. <[email protected]>  2009-05-29 16:01:26 UTC ---
The problem is that this provides extra privacy at the expense of creating a
major gap in security. You can no longer block abuse from individual IPs, you
can only block every anon editor or none of them. You wouldn't be able to use
the "autoblock" feature when blocking an account, because it would just block
everyone. Given the option between this and just not allowing anon editing, I
don't see why people wouldn't choose the latter, as this makes it virtually
impossible to control abuse.

(In reply to comment #4)
> About more intelligent solutions: Nothing against that, but it's not really
> trivial to do it in a sane way. Considering the sense of the whole thing is
> anonymity would require that also the administrator or someone else with
> administrative privileges is not able to find out the IP afterwards. So
> solutions with a fixed salt or something like that won't work.

If you put the salt in the config file, then only people with access to the
server could know it, and if you can't trust them, then you have bigger
problems than this.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to