TranslateUserManager

Fragment of a discussion from Support
Jump to navigation Jump to search

Everyone sees their own ip. The users in those log entries no longer exist and those log entries should not be there.

Nike (talk)08:19, 21 October 2019

What do you mean ? We don't see the same things in logs ? How can you be certain we have the right to see "deleted" log entries? Just because at one time we are using the same IP ? Anyway I do see all these log entries (about 4-5 listed each day since August 15, not any one before, but I see them in the log just since a few day; I many have not noticed that before). So you say that these log entries "no longer exist", but then why do I see them ? Was there a bug that caused IP accounts being created for logged in users, then immediately deleted after logon, but recreated later and repeatedly ? This is clearly a bug: there should not be any account creation before we submit an actual edit (just reading the wiki or logging in should log nothing, or you have a serious privacy issue for RGPD).

Verdy p (talk)23:01, 21 October 2019

@Verdy p: The IP address I see is the one I'm using. It's not an IPv6 address. I agree it's a bug, and should be fixed, but there is no privacy breach when everyone sees their own IP address.

Jon Harald Søby (talk)08:23, 23 October 2019

I thought that everyone saw my IPv6 address in this page, which then does not doisplay the same thing for everyone. Anyway these entries are spurious, It reveals that there are effectively lot of logs being made for non-sense account creations by a bot, which then gets rapidly reverted. I suspect this occurs each time we connect on the site. But in fact I tried to disconnect and waited for some minutes before revisiting once, then wait for other minutes, and come back later to login: 3 actions are logged. Any visitor from any IP may have an IP account instantly created, and logged, even if that accoutn is not used at all for any write action, jsut simply visiting. This means that this site is easily attackable: you can have lot of logs filling your disks and the database, and the site won't resist at all. This may explain why the site is sometimes SOOO long to refresh itself and has many antique statuses that can take sometimes days to be reflected.

Verdy p (talk)16:20, 28 October 2019