• TheTechnician27@lemmy.world
    link
    fedilink
    English
    arrow-up
    88
    ·
    edit-2
    9 days ago

    I’ll note too that even absent Heritage Foundation threats, this can be useful to spur development of the project (i.e. for people who don’t want a permanent account but don’t feel comfortable having their IP permanently, publicly attached to edits). Probably the reason it hasn’t been done in the past is it’s almost certainly going to make it easier for bad actors to fly under the radar. Before, you either had to show your IP address (which can reveal your location and will usually uniquely identify who edited something for at least a little bit; you also can’t use a VPN without special permission) or you had to register a single account (where if you created multiple, a sockpuppet investigation would often find out).

    So there’s an inherent trade-off, but I think right-wing threats of stochastic terrorism really tipped the scales.

    • subtext@lemmy.world
      link
      fedilink
      arrow-up
      12
      ·
      9 days ago

      Well you say you can use a VPN, but you may often see that you’re not able to edit using a VPN IP if that IP block has been used for vandalism in the past. So then you’d have to potentially revert to a coffee shop or library which would still identify your location.

      • TheTechnician27@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        ·
        9 days ago

        Point of clarification: I said that you can’t use a VPN, and that’s because those IPs are blocked. As noted, you need to ask for a special exception, which for most people isn’t navigable and may not even be granted without a good stated reason and/or trust built up through good edits.

    • blazeknave@lemmy.world
      link
      fedilink
      arrow-up
      7
      ·
      8 days ago

      Doesn’t Wiki still have the data? So a bad actor’s behavior pattern can be seen at aggregate behind the scenes?

      • TheTechnician27@lemmy.world
        link
        fedilink
        English
        arrow-up
        13
        ·
        edit-2
        8 days ago

        There are only 846 administrators on the English Wikipedia. This is across 7 million articles, 118,000 active registered users, about two edits per second, about a million files just on Wikipedia (most of them are hosted on Wikipedia’s sister project, Wikimedia Commons), and over 60 million total pages (articles, talk pages, user pages, redirects, help pages, templates, etc.). So although they have this data, it’s not useful if somebody doesn’t notice and investigate it. Administrators are stretched thin with administrative functions, and that’s not even accounting for many of them participating as normal editors too (tangent: besides obvious violations of policies, administrators have no more say over Wikipedia’s content than any other editor).

        Contrary to the idea that new editors sometimes get of Wikipedia as a suffocating police state run by the administrators, usually when edits get reverted it’s because regular editors notice this and revert it citing policies or guidelines without any administrator involvement (every editor has this power). If an administrator intervenes, it’s usually because a non-admin noticed and reported (what they perceive as) bad behavior to an admin, two editors are locked in a stalemate, or there’s some routine clerical issue to be resolved.

        Sockpuppeting, copyright violations, etc. are often (even usually) found by regular editors who notice something amiss and decide to dig a bit deeper. Even with automated tools that will flag an edit that replaces the article with the n-word 500 times in a row, and even given that some non-admin editors have tools which let them detect some issues, there’s just only so much that 850-ish people can find on a website that massive. For example, one time a few years back, I just randomly stumbled across an editor who was changing articles about obscure historic battles between India and Pakistan to have wildly pro-Pakistan slants – where treacherous India was the aggressor, but brilliant, strong, and courageous Pakistan stood their ground and sent pathetic India home crying with shit in their diapers. The bias was oozing from the page (with poor, if any, citations to match), and I can imagine this would fly under the radar for a while on a handful of articles that collectively get maybe 30 pageviews a day.

        TL;DR: Too few admins.

    • ricecake@sh.itjust.works
      link
      fedilink
      arrow-up
      2
      ·
      9 days ago

      I might have to go lookup their implementation. I feel like a good way of addressing your concern would be a secure hash of the IP address combined with a persistent random number.
      The same IP would always map to the same output and you wouldn’t be able to just pre-compute it and bypass everything.

      • jaybone@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        8 days ago

        What’s the persisted random number? Sounds like a salt, but usually each user has their own salt right? I assume we are not talking about logged in users here? Or are we?

        • ricecake@sh.itjust.works
          link
          fedilink
          arrow-up
          2
          ·
          8 days ago

          Since the goal is to create a correlation ID that maintains privacy, you need the result to be consistent. Hashing four billion IPs might take a minute, but it’s fundamentally doable in a reasonable time.

          By using some much large value that you keep secret, you’re basically padding the input to make the search space large enough that it’s not realistically able to be enumerated.

          Normally each user would have their own salt so that if two users have the same password, they hash to different values. In this case, you would want two users with the same IP to map to the same value, and simply for that value to not lead to an actual IP address.

  • Bonus @lemm.ee
    link
    fedilink
    English
    arrow-up
    24
    ·
    9 days ago

    How is that defensible? Are there no laws to tamp down online terrorism from bad actors like Heritage? I’d imagine they’re 100% in the wrong for making threats of any kind but I’m just a wee layman.

    • RushLana
      link
      fedilink
      English
      arrow-up
      34
      ·
      9 days ago

      The issue with “Wait that’s illegal” is that it never work in practice.

      If the heritage foundation decide to dox an editor tomorrow. The editor in question would have to file a lawsuit and go against an army of layers the heritage foundation can afford. Even if the editor win at the end, it will be a long and drawn out legal battle where heritage risk almost nothing.

      And this is not accounting for the editor having to deal with harassment due to being dox while having to pay for a layer and fighting a legal battle.

        • Jarix@lemmy.world
          link
          fedilink
          arrow-up
          3
          ·
          8 days ago

          They absolutely should be. Them being so doesn’t stop the problems from happening.

          It literally gives people in the US the constitutional right to due process, and that bedrock law is being massively ignored.

          There needs to be actual protections for when the law is not being followed

        • sugar_in_your_tea@sh.itjust.works
          link
          fedilink
          arrow-up
          1
          ·
          8 days ago

          It probably is, but again, it needs to reach a certain threshold before the authorities will get involved. Threatening to reveal the identity of an internet user isn’t particularly egregious, because the actual risk to that person from that information is likely minimal (is anyone going to actually hurt them?). If that person then starts to get actionable threats, then the authorities might get involved.

          So the best recourse these users have is suing for libel or something if they make false claims about them in connection to the doxxing.

          Unfortunately, there is no federally recognized right to privacy in public spaces, and the Internet is considered a “public space,” so revealing someone’s home address or identity isn’t considered a violation of any law. I’m a homeowner, and you can totally find my address if you know my name, or my name if you know my address, since it’s all public record. I think most people would assume an IP address is less intimate than that public record, hence why there are no laws against it.

          I’m not happy about this, and I personally wish there were federal privacy protections here. I don’t want my address being associated with my name as public information, though there should be a legal way to get that information when needed (i.e. a journalist doing a story on crime in an area or something). This should also apply to IP addresses, connecting an IP address to an identity should require some kind of legal measure.

    • CosmicTurtle0@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      13
      ·
      9 days ago

      Even if there was, look who’s in power. Even if judges ruled against Heritage, I’m not holding my breath of them getting any sort of accountability.

    • Zorsith
      link
      fedilink
      English
      arrow-up
      4
      ·
      edit-2
      9 days ago

      The internet is, by nature, problematic in terms of legal compliance because it is not wholly under the jurisdiction of any singular country.

      You can go after hardware physically located within your own jurisdiction, and you can go after operators under your jurisdiction. But if you start going after folks/hardware outside of that, you’re rightfully going to be told to fuck off. (Which is why IP holders burn so much money on anti-piracy lobbying and get practically nowhere)

      Its the same reason encryption bans are laughably idiotic.

    • Geodad@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      9 days ago

      No laws? Sir/ma’am, we have the 2nd amendment. I can’t think of any law higher.

    • technocrit@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      1
      ·
      8 days ago

      It’s defensible because it’s public record. Wikipedia has been doxing editors by default for decades. It’s one way that they intimidate people from making edits.

      • Bonus @lemm.ee
        link
        fedilink
        English
        arrow-up
        1
        ·
        8 days ago

        I’ve never edited anything there but log in sometimes just if I’m interested in a topic and want to bookmark it. This is making me think I should just delete my account.

        • Jarix@lemmy.world
          link
          fedilink
          arrow-up
          2
          ·
          8 days ago

          You should not make that decision only because of this conversation, what if they are massively misinformed?

          • Bonus @lemm.ee
            link
            fedilink
            English
            arrow-up
            1
            ·
            8 days ago

            Truth. Good point. I’m waiting till I get myself more well informed. Thanks.

            • neukenindekeuken@sh.itjust.works
              link
              fedilink
              arrow-up
              5
              ·
              edit-2
              8 days ago

              As someone else said, the Heritage Foundation is American. They’re also currently part of Trump’s cabinet, and they wrote Project 2025 which his administration is largely through enacting already. They’ve already heavily influenced American politics right from the top down, and are responsible for the vast majority of EO’s from Trump’s administration.

              Wikipedia is also an American based non-profit.

              If you don’t understand this, then I don’t know what else to tell you. You might be one of those can’t see the forest for the trees people I hear about.

              Edit: Lol, this guy went through my history and downvoted everything I’ve ever posted from yesterday on back. What a snowflake ;)

  • MajesticElevator@lemmy.zip
    link
    fedilink
    arrow-up
    20
    ·
    8 days ago

    I’ll never contribute to Wikipedia because they block VPNs

    They should really unblock them. I know it’s not always easy to combat these problems, but a dedicated individual can break articles using non-VPN IPs like mobile data IPs

      • technocrit@lemmy.dbzer0.com
        link
        fedilink
        arrow-up
        2
        ·
        8 days ago

        It’s not an open website at all. It severely privileges hegemonic editors promoting the status quo. Thus it’s actually a right-wing website.

    • Zorsith
      link
      fedilink
      English
      arrow-up
      24
      ·
      9 days ago

      Wikipedia attempts to shield editors from being Doxxed and harassed by right wing nuts and their followers over writing accurate information.

      Right wing nuts take offense at not being able to shape the narrative/history.

      • Sunshine (she/her)@lemmy.caOP
        link
        fedilink
        English
        arrow-up
        2
        ·
        8 days ago

        I can’t wait for the ring wing nuts to fall back behind so behind from this massive web of lies they’re concocting for themselves. They’re now saying “vegetables are toxic and that you shouldn’t eat them”…

        • stray@pawb.social
          link
          fedilink
          arrow-up
          3
          ·
          8 days ago

          To be fair, most plants do manufacture their own pesticides that may harm small reptiles.

  • dbtng@eviltoast.org
    link
    fedilink
    English
    arrow-up
    10
    ·
    edit-2
    8 days ago

    Um … This doxing threat seems like a really dumb move, on par with daring Anonymous to take you down. Really, if you want to play Internet hardball, there are folks that would love to show you how it works. (Not me!)

  • Zorsith
    link
    fedilink
    English
    arrow-up
    7
    ·
    9 days ago

    I imagine this has been underway since whenever that legal kerfluffle in India happened

  • technocrit@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    8 days ago

    Oh they decided to protect anonymous editors?

    If Wikipedia actually gave a shit, they would have done this decades ago.