Producto de confianza y seguridad/Cuentas temporales
|
Cuentas temporales
Un nuevo tipo de cuenta de usuario que cambia la forma en que se manejan los datos personales de usuarios que no han iniciado sesión
|
Las cuentas temporales para editores no registrados son un nuevo tipo de cuentas de usuario. En las wikis donde se habilitaron las cuentas temporales, las direcciones IP de los editores no registrados no son visibles al público. Sólo aquellos que combaten el spam, el vandalismo, el acoso y la desinformación tienen acceso a las direcciones IP.
Actualmente, cualquiera puede editar wikis de Wikimedia sin tener una cuenta de Wikimedia o sin iniciar sesión. MediaWiki, el software detrás de los proyectos de Wikimedia, registrará y publicará su dirección IP en su registro público si edita sin iniciar sesión en su cuenta. Cualquiera que busque su dirección IP la encontrará.
Los proyectos de Wikimedia tienen una buena razón para almacenar y publicar direcciones IP: desempeñan un papel fundamental para evitar el vandalismo y el acoso en nuestras wikis.
Sin embargo, tu dirección IP puede indicar desde dónde estás editando y puede usarse para identificarte a ti o a tu dispositivo. Esto es especialmente preocupante si estás editando desde un territorio donde nuestras wikis se consideran controvertidas. La publicación de tu dirección IP puede permitir que otros te localicen.
Con los cambios en las leyes y estándares de privacidad (p.e., el Reglamento General de Protección de Datos y la conversación global sobre privacidad que éste inició), el equipo legal de la Fundación Wikimedia ha decidido proteger la privacidad de los usuarios ocultando las direcciones IP del público en general. Sin embargo, continuaremos dando acceso a los usuarios que necesitan verlas para proteger las wikis.
Somos conscientes de que este cambio afectará los flujos de trabajo antiabuso actuales. Estamos comprometidos a desarrollar herramientas o mantener el acceso a herramientas que puedan identificar y bloquear vándalos, títeres, editores con conflictos de interés y otros malos actores después de que se enmascaren las IP.
Para todos
Para verificadores y funcionarios
Para desarrolladores
Noticias y actualizaciones
Cronología
Editado por última vez el .
- Implementación en testwiki –
- Implementación en las primeras wikis piloto – no antes del /
Actualizaciones
: Changes to access to temporary account IP addresses, progress on the related tools and features, and preparations for more deployments
- Pilot satisfaction survey – we conducted a survey to check the impact of the pilot deployment and collect feedback on potential improvements. We asked stewards, global sysops, as well as CheckUsers and admins on 11 minor pilot wikis. We were happy to learn that the reported satisfaction was moderate to high, and disruption to workflows was low. Ideas shared there helped us improve the features and design. See the full analysis.
- Changes to access to temporary account IP addresses for users who don't have extended rights
- Manual granting – initially, we chose numerical thresholds to access IP addresses for users who don't have extended rights. We decided this before deploying temporary accounts on any wiki. However, after gathering feedback from our pilot projects we realized that these thresholds were quite low and it was still too easy for bad-faith actors to gain access to temporary account IP addresses. In addition, outside actors who may want to access IP addresses could contact users who have this right in an attempt to obtain this information. Temporary accounts should meaningfully improve editor privacy, so we decided to be more restrictive before we roll this feature out on wikis with large communities. This is why we updated the policy and changed the granting of this group from automatic to manual, done by administrators or stewards upon request. Read the full message we posted on Meta-Wiki and 20 large Wikipedias.
- Technical enforcement – we have decided to technically prevent the assignment of the Temporary account IP viewer group to accounts which do not meet criteria. Stewards will be able to override this limitation. Here's the decision record page. We will also include this on the Limits to configuration changes page.
- Next deployments will happen in June – in autumn 2024, we successfully deployed temporary accounts on small wikis. Since then, users with global rights have started to see how temporary accounts work in practice, and how to handle cross-wiki workflows. Now, we are ready for more deployments, and in the coming weeks, we will be talking with large communities about it. Communities which receive temporary accounts in June will have more opportunities and time to suggest improvements than communities which will receive the change in the last deployment later this year.
- Changes coordinated with the time of new deployments – because the following changes depend on the policy change described above and on one another, we are introducing them shortly before and after the next deployments:
- Access to IP Info on wikis with temporary accounts enabled and Meta-Wiki – users with access to temporary account IP addresses will have full access to IP Info. Those without access to temporary account IP addresses will not be able to use IP Info. In addition, IP Info will no longer be a beta feature and available as a full feature.
- Access to IP info on the remaining wikis – this is not changing – autoconfirmed users will have limited access, users with extended rights like admins will have the full access, and IP Info will remain as a beta feature there until the deployment of temporary accounts.
- Onboarding dialog (T373818) and Autoreveal (T374869) – the features we mentioned in the previous update will also be deployed around the time of the new deployments. The onboarding dialog will be shown to all users with access to temporary account IP addresses, on both wikis where temporary accounts were deployed in 2024 and wikis where the deployments will happen in June.
- Statistics of blocks on pilot wikis – we have collected data on the number of IP and account blocks before and after the pilot deployment. Our results show that while the number of blocks of registered accounts didn't change, most of the remaining blocks (approximately 90%) affected temporary accounts, and only about 10% were IP blocks. This seems to support our hypothesis that most of the logged-out abusive activity may be prevented with account blocks, which reduces collateral damage significantly. After the June deployments, we will be sharing more data.
- Special:MassGlobalBlock – we have built a new special page to allow stewards block multiple accounts and IPs globally. It was requested by stewards in 2016. We took inspiration from an existing gadget. This feature now helps stewards combat abuse from temporary and registered accounts more effectively. (T124607)
- FAQ and documentation refresh – considering all these changes, we have updated the FAQ to include the manual granting of the Temporary account IP address group elaborate on retroactive patrolling. We will be also rewording the part about the motivation for the project. In the coming weeks, we will make more documentation changes.
- Our plans for the next fiscal year – we invite you to read the final draft of the 2025/2026 Annual plan, and specifically the part describing our work: key results WE4.1 (Incident Reporting System), WE4.2 (improvements to anti-abuse tooling), WE4.4 (Temporary Accounts) and WE4.5 (AI risk and opportunity assessment). Share your comments on the talk page until May 31st.
Declaraciones del departamento legal de la Fundación Wikimedia
¡Hola! Hemos publicado una nueva página de política: Acceso a direcciones IP de cuentas temporales. Se explica cómo los usuarios pueden obtener acceso a las direcciones IP. Más adelante, actualizaremos la sección sobre el uso de direcciones IP. En ella, añadiremos información sobre cómo y dónde acceder a las direcciones IP y qué queda registrado cuando se accede a las direcciones IP. También hay una página nueva con preguntas frecuentes. Ambas páginas usan el término «cuentas de usuario temporales». Este nombre proviene de la primera versión del software (MVP). Pronto añadiremos más información sobre el tema. Apreciamos tus comentarios en la página de discusión.
Ponte en contacto
-
-
-
Benedict Udeh
Comunicaciones del movimiento
(apoyo voluntario para desarrolladores)
budeh-ctr
wikimedia.org
