Viewing filter 1,168: Misuse of Unicode mathematical or letterlike symbols in usernames

Filter parameters

Filter ID:	1,168
Description: (publicly viewable)
Filter hits:	687 hits
Statistics:	Of the last 151,841 actions, this filter has matched 0 (0%). On average, its run time is 0.06 ms, and it consumes 2.3 conditions of the condition limit.
Conditions: (documentation)	action == "edit" & user_name rlike "[\x{2100}-\x{2125}\x{2127}-\x{2129}\x{212C}-\x{214F}\x{1D00}-\x{1D7F}\x{1D400}-\x{1D7FF}]" action == "edit" & user_name rlike "[\x{2100}-\x{2125}\x{2127}-\x{2129}\x{212C}-\x{214F}\x{1D00}-\x{1D7F}\x{1D400}-\x{1D7FF}]"
Notes:	Checks for misuse of Unicode Mathematical Alphanumeric Symbols in usernames. This is generally used to create "stylish" usernames that appear to be in bold type or italics resulting in accidental obfuscation, but can also be used for deliberate obfuscation. Added a second range, Letterlike Symbols. Wow -- false positives. Disabling blocking. Removing Kelvin symbol; looks like Unicode normalization might have turned this into an ASCII K Provoked a hit here: https://en.wikipedia.org/wiki/Special:AbuseLog/31016167 , seems to be working OK, no false positives for some time, presumed working properly now. Same thing seems to have happened to the Angstrom symbol being normalized to CAPITAL A WITH RING ABOVE; removing that too. Added another set of lookalikes from the Phonetic Extensions range. 27 November -- all working fine, zero false positives Removed U+2126 OHM SIGN, which was being normalized to an Omega thus generating false positives. Use \x{...} instead of literal characters; should be easier to edit the filter. --Suffusion of Yellow 21:10 13 Jun 2022 Now enabling on _all_ actions, not just account creation, as vandals have recently been circumventing this filter by (presumably) creating the accounts on other Wikipedia sites, then editing here. See [[User:𝕮𝖍𝖆𝖗𝖑𝖎𝖊(WCF)]] and [[User:ℙ𝕪𝕣𝕒𝕃𝕒𝕓𝕤]] for examples of this. -- The Anome 12 Aug 2022 Now allowing account creation, but not allowing them to do anything else. -- The Anome 27 September 2022 Same intent as above, but more futureproof logic. Any action with "account" in it is permitted, but no other -- The Anome 9 Oct 2022 Turned this into a test filter; why is this not catching my test edits? -- The Anome 19 Oct Rm T230256 workaround. --Suffusion of Yellow 00:01 4 Dec 2022 Now logging edit attempts by these accounts. -- The Anome 13 Feb 2023 This will never match anything; "accountname" is only set if action is "createaccount" or "autocreateaccount". Changed "accountname" to "user_name". --Suffusion of Yellow 22:25 8 Apr 2024
Flags:	Hide details of this filter from public view Enable this filter Mark as deleted
Filter last modified:	22:27, 8 April 2024 by Suffusion of Yellow (talk \| contribs)
History:	View this filter's history
Tools:	Export this filter to another wiki {"data":{"rules":"action == \"edit\" \u0026\r\nuser_name rlike \"[\\x{2100}-\\x{2125}\\x{2127}-\\x{2129}\\x{212C}-\\x{214F}\\x{1D00}-\\x{1D7F}\\x{1D400}-\\x{1D7FF}]\"","name":"Misuse of Unicode mathematical or letterlike symbols in usernames","comments":"Checks for misuse of Unicode Mathematical Alphanumeric Symbols in usernames. This is generally used to create \"stylish\" usernames that appear to be in bold type or italics resulting in accidental obfuscation, but can also be used for deliberate obfuscation.\r\n\r\nAdded a second range, Letterlike Symbols.\r\n\r\nWow -- false positives. Disabling blocking. Removing Kelvin symbol; looks like Unicode normalization might have turned this into an ASCII K\r\n\r\nProvoked a hit here: https://en.wikipedia.org/wiki/Special:AbuseLog/31016167 , seems to be working OK, no false positives for some time, presumed working properly now.\r\n\r\nSame thing seems to have happened to the Angstrom symbol being normalized to CAPITAL A WITH RING ABOVE; removing that too.\r\n\r\nAdded another set of lookalikes from the Phonetic Extensions range.\r\n\r\n27 November -- all working fine, zero false positives\r\n\r\nRemoved U+2126 OHM SIGN, which was being normalized to an Omega thus generating false positives.\r\n\r\nUse \\x{...} instead of literal characters; should be easier to edit the filter. --Suffusion of Yellow 21:10 13 Jun 2022\r\n\r\nNow enabling on _all_ actions, not just account creation, as vandals have recently been circumventing this filter by (presumably) creating the accounts on other Wikipedia sites, then editing here. See [[User:\ud835\udd6e\ud835\udd8d\ud835\udd86\ud835\udd97\ud835\udd91\ud835\udd8e\ud835\udd8a(WCF)]] and [[User:\u2119\ud835\udd6a\ud835\udd63\ud835\udd52\ud835\udd43\ud835\udd52\ud835\udd53\ud835\udd64]] for examples of this. -- The Anome 12 Aug 2022\r\n\r\nNow allowing account creation, but not allowing them to do anything else. -- The Anome 27 September 2022\r\n\r\nSame intent as above, but more futureproof logic. Any action with \"account\" in it is permitted, but no other -- The Anome 9 Oct 2022\r\n\r\nTurned this into a test filter; why is this not catching my test edits? -- The Anome 19 Oct\r\n\r\nRm T230256 workaround. --Suffusion of Yellow 00:01 4 Dec 2022\r\n\r\nNow logging edit attempts by these accounts. -- The Anome 13 Feb 2023\r\n\r\nThis will never match anything; \"accountname\" is only set if action is \"createaccount\" or \"autocreateaccount\". Changed \"accountname\" to \"user_name\". --Suffusion of Yellow 22:25 8 Apr 2024","group":"default","actions":[],"enabled":true,"deleted":false,"hidden":false,"global":false},"actions":[]}

Actions to take when matched

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time (in seconds):

Group throttle by:

user

See the documentation on mediawiki.org.

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without "MediaWiki:" prefix)

Prevent the user from performing the action in question

System message to use for disallowing:

Page name of other message:

(without "MediaWiki:" prefix)

Revoke the user's autoconfirmed status

Tag the edit in contributions lists and page histories

Tags to apply:

(see Wikipedia:Tags for use and formatting)

(please don't rename a tag here, see link above)

(one per line, no commas, publicly visible)