Viewing filter 887: Excessive repetition in usernames

You are viewing an old version of this filter. The statistics quoted are for the most recent version of the filter. • Return to this filter's history.

Filter parameters

Filter ID:	887
Description: (publicly viewable)
Statistics:	Of the last 100,695 actions, this filter has matched 12 (0.01%). On average, its run time is 0.11 ms, and it consumes 1.7 conditions of the condition limit.
Conditions: (documentation)	action == "createaccount" & ( user_rights ? /* T230256 workaround / !('override-antispoof' in user_rights) : true ) & ( lcase(accountname) rlike "(...).\1.\1.\1.\1" \| lcase(accountname) rlike "(....).\1.\1.\1" \| lcase(accountname) rlike "(..)\1\1\1\1" \| lcase(accountname) rlike "(...)\1\1\1" \| lcase(accountname) rlike "(....)\1\1" ) action == "createaccount" & ( user_rights ? /* T230256 workaround / !('override-antispoof' in user_rights) : true ) & ( lcase(accountname) rlike "(...).\1.\1.\1.\1" \| lcase(accountname) rlike "(....).\1.\1.\1" \| lcase(accountname) rlike "(..)\1\1\1\1" \| lcase(accountname) rlike "(...)\1\1\1" \| lcase(accountname) rlike "(....)\1\1" )
Notes:	Checking for excessive internal repetition of _any_ three-character string for now, to catch usernames like those checked for in filter 886. This is a common feature of some types of long-term username abuse. Add `!('override-antispoof' in user_rights)` so this can be bypassed if and when needed (ACC concern?) --TNT 14th Nov 2017 After yet more run-time, this seems to be doing well at catching LTA/potentially disruptive usernames, with no false positives so far. I think we can probably leave this to run indefinitely without any further problems. -- The Anome The LTA seems to have gone away for now, but this filter still seems to be doing a great job of catching potentially disruptive usernames with essentially no false-positives, so I'm keeping it enabled. -- The Anome, 26 November 2017 Now does both four repetitions of three and three repetitions of four. -- The Anome, 1 March 2018 Re discussion on [[Wikipedia talk:Edit filter]], now triggers on four repetitions of four, or five repetitions of three, OR five _successive_ repetitions of a character pair (10 characters of repetition), thus detecting, for example, "aaaaaaaaaa" or "ababababab". It also now uses [[MediaWiki:Abusefilter-disallowed-repetitious-username]] as warning message. -- The Anome, 3 April 2018 Getting very slightly more aggressive by also adding four _successive_ repetitions of a character triple, (12 characters of repetition, eg. "blablablabla") and three _successive_ repetitions of four (12 characters of repetition, eg "asdfasdfasdf") This should catch more valid cases, but I believe should not catch any of the false positives discussed earlier. -- The Anome, 8 May 2018 See also the experimental filter 890, which attempts to spot nonsensical usernames which are not caught by this filter. -- The Anome, 22 June 2018 rm redundant warning --SoY 4 Mar 2019 Deal properly with undefined user_rights. See [[phab:T230256]] and [[Special:PermaLink/922329559#Add exception to edit filter 890 for account creators]]. --Suffusion of Yellow 01:16 22 Oct 2019
Flags:	Hide details of this filter from public view Enable this filter Mark as deleted
Filter last modified:	12:30, 10 October 2020 by The Anome (talk \| contribs)
History:	View this filter's history
Tools:	Export this filter to another wiki {"data":{"rules":"action == \"createaccount\" \u0026\r\n(\r\n user_rights ? /* T230256 workaround /\r\n !('override-antispoof' in user_rights) :\r\n true\r\n) \u0026 (\r\n lcase(accountname) rlike \"(...).\\1.\\1.\\1.\\1\" \|\r\n lcase(accountname) rlike \"(....).\\1.\\1.\\1\" \|\r\n lcase(accountname) rlike \"(..)\\1\\1\\1\\1\" \|\r\n lcase(accountname) rlike \"(...)\\1\\1\\1\" \| \r\n lcase(accountname) rlike \"(....)\\1\\1\" \r\n)","name":"Excessive repetition in usernames","comments":"Checking for excessive internal repetition of _any_ three-character string for now, to catch usernames like those checked for in filter 886. This is a common feature of some types of long-term username abuse.\r\n\r\nAdd `!('override-antispoof' in user_rights)` so this can be bypassed if and when needed (ACC concern?) --TNT 14th Nov 2017\r\n\r\nAfter yet more run-time, this seems to be doing well at catching LTA/potentially disruptive usernames, with no false positives so far. I think we can probably leave this to run indefinitely without any further problems. -- The Anome\r\n\r\nThe LTA seems to have gone away for now, but this filter still seems to be doing a great job of catching potentially disruptive usernames with essentially no false-positives, so I'm keeping it enabled. -- The Anome, 26 November 2017\r\n\r\nNow does both four repetitions of three and three repetitions of four. -- The Anome, 1 March 2018\r\n\r\nRe discussion on [[Wikipedia talk:Edit filter]], now triggers on four repetitions of four, or five repetitions of three, OR five _successive_ repetitions of a character pair (10 characters of repetition), thus detecting, for example, \"aaaaaaaaaa\" or \"ababababab\". It also now uses [[MediaWiki:Abusefilter-disallowed-repetitious-username]] as warning message. -- The Anome, 3 April 2018\r\n\r\nGetting very slightly more aggressive by also adding four _successive_ repetitions of a character triple, (12 characters of repetition, eg. \"blablablabla\") and three _successive_ repetitions of four (12 characters of repetition, eg \"asdfasdfasdf\") This should catch more valid cases, but I believe should not catch any of the false positives discussed earlier. -- The Anome, 8 May 2018\r\n\r\nSee also the experimental filter 890, which attempts to spot nonsensical usernames which are not caught by this filter. -- The Anome, 22 June 2018\r\n\r\nrm redundant warning --SoY 4 Mar 2019\r\n\r\nDeal properly with undefined user_rights. See [[phab:T230256]] and [[Special:PermaLink/922329559#Add exception to edit filter 890 for account creators]]. --Suffusion of Yellow 01:16 22 Oct 2019","group":"default","actions":{"disallow":["abusefilter-disallowed-repetitious-username"]},"enabled":true,"deleted":false,"hidden":false,"global":false},"actions":{"disallow":["abusefilter-disallowed-repetitious-username"]}}

Actions to take when matched

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time (in seconds):

Group throttle by:

user

See the documentation on mediawiki.org.

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without "MediaWiki:" prefix)

Prevent the user from performing the action in question

System message to use for disallowing:

Page name of other message:

(without "MediaWiki:" prefix)

Revoke the user's autoconfirmed status

Tag the edit in contributions lists and page histories

Tags to apply:

(see Wikipedia:Tags for use and formatting)

(please don't rename a tag here, see link above)

(one per line, no commas, publicly visible)

You are viewing an old version of this filter. The statistics quoted are for the most recent version of the filter. • Return to this filter's history.