Bugreporter added a comment.

  In T44362#440341 <https://phabricator.wikimedia.org/T44362#440341>, @daniel 
wrote:
  
  > It's true that IDs may be "swallowed" by unsuccessful attempts to create an 
item. But I don't see this as a problem. The IDs have no significance, they 
could just as well be chosen randomly instead of sequentially. The ID system 
may well be changed to something else entirely at some point, e.g. GUIDs.
  >
  > I want to thank you for reporting this anyway, because it *might* have been 
an indication for Something Bad happening, like items just vanishing without a 
trace. But I don't see any evidence of that. So, closing WONTFIX.
  
  This is already posted on wiki, but also post here for reference:
  Allocating one ID requires one read and write of wb_id_counters table. It is 
possible that some malicious users doing a large number of failed creation, 
which may significantly increase the database load. What's worse is 1. There 
are no ways on wiki to find out users who are doing failed item creation and 2. 
Blocking the user does not solve the issue as IDs will still be allocated.
  
  Before T213817: Use separate DB connection for (Sql/UpsertSql)IdGenerator in 
Wikibase <https://phabricator.wikimedia.org/T213817> is fixed, things are even 
much worse, as there was a DoS potential: malicious users can produce many 
database errors (logspam), or even impede others creating new entities.

TASK DETAIL
  https://phabricator.wikimedia.org/T232620

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Bugreporter
Cc: M2k_dewiki, Epidosis, Lea_Lacroix_WMDE, daniel, Stryn, jeremyb, Merl, 
Nemo_bis, Legoktm, jeblad, Wikidata-bugs, ChongDae, StudiesWorld, 
Lydia_Pintscher, Aklapper, Bugreporter, Akuckartz, darthmon_wmde, Nandana, 
Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, _jensen, rosalieper, 
Scott_WUaS, aude, Mbch331
_______________________________________________
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to