https://bugzilla.wikimedia.org/show_bug.cgi?id=19161

Gregor Hagedorn <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[email protected]

--- Comment #48 from Gregor Hagedorn <[email protected]> 2011-04-05 
06:49:23 UTC ---
The wikimedia implementation/use of the mediawiki software clearly VIOLATES the
wikimedia foundation privacy policy, which says:

----

Reading projects: No more information on users and other visitors reading pages
is collected than is typically collected in server logs by web sites. Aside
from the above raw log data collected for general purposes, page visits do not
expose a visitor's identity publicly. Sampled raw log data may include the IP
address of any user, but it is not reproduced publicly.

----

Contrary to the policy, READING a new wiki is PUBLICLY exposed (on those wikis
where a bot reads new user accounts and creates welcome pages) when a user has
previously signed in to another wikimedia wiki. 

I do not consider the option to disable single-sign as a practical solution. A
single sign-on to commons, en.wikipedia, de.wikipedia, perhaps mediawiki.org
may be desired, but recording chance read-only-visits at any number of other
wikis would still be surprising.

Solutions:
a) fix the software so that user creation occurs only after an edit
b) change the privacy policy to read:

Reading projects: No more information on users and other visitors reading pages
is collected than is typically collected in server logs by web sites. However,
when using single-sign on, any visit to a wikimedia site you had not previously
visited may be recorded publicly. Aside from the above raw log data collected
for general purposes, page visits do not expose a visitor's identity publicly.
Sampled raw log data may include the IP address of any user, but it is not
reproduced publicly.

c) prohibit bots that create welcome pages after user creation without
corresponding edits.

Gregor

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to