https://bugzilla.wikimedia.org/show_bug.cgi?id=69047
Bug ID: 69047
Summary: Develop countermeasures to the merge page histories
attack
Product: MediaWiki
Version: 1.24-git
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: Page deletion
Assignee: [email protected]
Reporter: [email protected]
Web browser: ---
Mobile Platform: ---
See [[mw:User:MZMcBride/Attacks#Merge_page_histories]]: This attack by a rogue
sysop "causes a royal mess that very few people can clean up properly. Find two
pages with less than 2500 revisions (A and B) and one page with thousands and
thousands of revisions (C). Delete page A and move page B to A's old location.
Delete page B and then move page C to B's (and A's) old location. Restore the
edits and suddenly you've merged three page's history into one. And there's
nothing easy to do to reverse it."
One solution might be to track in log_search or log_params the revision IDs
involved in page move, page deletion, and page undeletion events. Then a
non-rogue sysop could select the log events to roll back, and the pages could
be restored to their condition before those log events occurred.
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
