Uzume added a comment.

  I disagree. The availability of ones password does not fall into "security by 
obscurity" because it is, in general, not obscurely available from other 
sources (and if it is, that is an entirely different type of security issue). 
The point being, security should clearly delineate who has access to what and 
make all things available to such persons and noting of what they should not 
have access to. Since the concept of most linked pages is available via other 
public means this clearly falls into that the category of "security by 
obscurity" (unless you plan to secure the data through all means of access 
which seems to go beyond this proposal).
  
  And since the data is already currently available, I maintain you are 
punishing users by taking away rights they currently have. This is a trend that 
has happened more and more over time with Wikimedia projects so it hardly seems 
like a prize for those that obtain get confirmed accounts. Also this type of 
data is more of a responsibility than a prize. By taking it away from a class 
of users, you are stating they are not responsible anymore. But we both know 
the vast majority of users in the class you propose to censor this data from 
are not abusers of it--just a small portion which choose to vandalize Wikimedia 
projects.
  
  I agree making something harder for vandals can be somewhat effective (that 
is in fact how cryptography is defined), but you need to balance that with the 
cost of doing something. I feel for the anti-vandals (who should be rewarded) 
but I do not think this proposal is an appropriate response to increasingly 
more sophisticated vandalism (one could argue there is more of less vandalism 
but I believe the level has not changed significantly over the long run but the 
sophistication of the means certainly has and thus security remains a "cat and 
mouse" game; the level of sophistication directly impacts how effective it is 
and how painful anti-vandals find the ugly results).

TASK DETAIL
  https://phabricator.wikimedia.org/T213300

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Uzume
Cc: Uzume, Lydia_Pintscher, Addshore, Aklapper, abian, darthmon_wmde, 
DannyS712, Nandana, Lahi, Gq86, GoranSMilovanovic, QZanden, LawExplorer, 
_jensen, rosalieper, Wikidata-bugs, aude, Mbch331
_______________________________________________
Wikidata-bugs mailing list
Wikidata-bugs@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to