Viewing filter 887: Excessive repetition in usernames

Filter parameters

Filter ID:	887
Description: (publicly viewable)
Filter hits:	26,707 hits
Statistics:	Of the last 156,799 actions, this filter has matched 7 (0%). On average, its run time is 0.11 ms, and it consumes 1.2 conditions of the condition limit.
Conditions: (documentation)	(action == "createaccount" ) & !('override-antispoof' in user_rights) & ( lcase(accountname) rlike "(...).\1.\1.\1.\1" \| lcase(accountname) rlike "(....).\1.\1.\1" \| lcase(accountname) rlike "(..)\1\1\1\1" \| lcase(accountname) rlike "(...)\1\1\1" \| lcase(accountname) rlike "(....)\1\1" ) (action == "createaccount" ) & !('override-antispoof' in user_rights) & ( lcase(accountname) rlike "(...).\1.\1.\1.\1" \| lcase(accountname) rlike "(....).\1.\1.\1" \| lcase(accountname) rlike "(..)\1\1\1\1" \| lcase(accountname) rlike "(...)\1\1\1" \| lcase(accountname) rlike "(....)\1\1" )
Notes:	Checking for excessive internal repetition of _any_ three-character string for now, to catch usernames like those checked for in filter 886. This is a common feature of some types of long-term username abuse. Add `!('override-antispoof' in user_rights)` so this can be bypassed if and when needed (ACC concern?) --TNT 14th Nov 2017 After yet more run-time, this seems to be doing well at catching LTA/potentially disruptive usernames, with no false positives so far. I think we can probably leave this to run indefinitely without any further problems. -- The Anome The LTA seems to have gone away for now, but this filter still seems to be doing a great job of catching potentially disruptive usernames with essentially no false-positives, so I'm keeping it enabled. -- The Anome, 26 November 2017 Now does both four repetitions of three and three repetitions of four. -- The Anome, 1 March 2018 Re discussion on [[Wikipedia talk:Edit filter]], now triggers on four repetitions of four, or five repetitions of three, OR five _successive_ repetitions of a character pair (10 characters of repetition), thus detecting, for example, "aaaaaaaaaa" or "ababababab". It also now uses [[MediaWiki:Abusefilter-disallowed-repetitious-username]] as warning message. -- The Anome, 3 April 2018 Getting very slightly more aggressive by also adding four _successive_ repetitions of a character triple, (12 characters of repetition, eg. "blablablabla") and three _successive_ repetitions of four (12 characters of repetition, eg "asdfasdfasdf") This should catch more valid cases, but I believe should not catch any of the false positives discussed earlier. -- The Anome, 8 May 2018 See also the experimental filter 890, which attempts to spot nonsensical usernames which are not caught by this filter. -- The Anome, 22 June 2018 rm redundant warning --SoY 4 Mar 2019 Deal properly with undefined user_rights. See [[phab:T230256]] and [[Special:PermaLink/922329559#Add exception to edit filter 890 for account creators]]. --Suffusion of Yellow 01:16 22 Oct 2019 Handling autocreation of accounts as well - The Anome, 24 August 2022 Reverting - The Anome, 24 August 2022 Rm T230256 workaround. --Suffusion of Yellow 00:09 4 Dec 2022
Flags:	Hide details of this filter from public view Enable this filter Mark as deleted
Filter last modified:	00:09, 4 December 2022 by Suffusion of Yellow (talk \| contribs)
History:	View this filter's history
Tools:	Export this filter to another wiki {"data":{"rules":"(action == \"createaccount\" ) \u0026\r\n!('override-antispoof' in user_rights) \u0026\r\n(\r\n lcase(accountname) rlike \"(...).\\1.\\1.\\1.\\1\" \|\r\n lcase(accountname) rlike \"(....).\\1.\\1.*\\1\" \|\r\n lcase(accountname) rlike \"(..)\\1\\1\\1\\1\" \|\r\n lcase(accountname) rlike \"(...)\\1\\1\\1\" \| \r\n lcase(accountname) rlike \"(....)\\1\\1\" \r\n)","name":"Excessive repetition in usernames","comments":"Checking for excessive internal repetition of _any_ three-character string for now, to catch usernames like those checked for in filter 886. This is a common feature of some types of long-term username abuse.\r\n\r\nAdd `!('override-antispoof' in user_rights)` so this can be bypassed if and when needed (ACC concern?) --TNT 14th Nov 2017\r\n\r\nAfter yet more run-time, this seems to be doing well at catching LTA/potentially disruptive usernames, with no false positives so far. I think we can probably leave this to run indefinitely without any further problems. -- The Anome\r\n\r\nThe LTA seems to have gone away for now, but this filter still seems to be doing a great job of catching potentially disruptive usernames with essentially no false-positives, so I'm keeping it enabled. -- The Anome, 26 November 2017\r\n\r\nNow does both four repetitions of three and three repetitions of four. -- The Anome, 1 March 2018\r\n\r\nRe discussion on [[Wikipedia talk:Edit filter]], now triggers on four repetitions of four, or five repetitions of three, OR five _successive_ repetitions of a character pair (10 characters of repetition), thus detecting, for example, \"aaaaaaaaaa\" or \"ababababab\". It also now uses [[MediaWiki:Abusefilter-disallowed-repetitious-username]] as warning message. -- The Anome, 3 April 2018\r\n\r\nGetting very slightly more aggressive by also adding four _successive_ repetitions of a character triple, (12 characters of repetition, eg. \"blablablabla\") and three _successive_ repetitions of four (12 characters of repetition, eg \"asdfasdfasdf\") This should catch more valid cases, but I believe should not catch any of the false positives discussed earlier. -- The Anome, 8 May 2018\r\n\r\nSee also the experimental filter 890, which attempts to spot nonsensical usernames which are not caught by this filter. -- The Anome, 22 June 2018\r\n\r\nrm redundant warning --SoY 4 Mar 2019\r\n\r\nDeal properly with undefined user_rights. See [[phab:T230256]] and [[Special:PermaLink/922329559#Add exception to edit filter 890 for account creators]]. --Suffusion of Yellow 01:16 22 Oct 2019\r\n\r\nHandling autocreation of accounts as well - The Anome, 24 August 2022\r\n\r\nReverting - The Anome, 24 August 2022\r\n\r\nRm T230256 workaround. --Suffusion of Yellow 00:09 4 Dec 2022","group":"default","actions":{"disallow":["abusefilter-disallowed-repetitious-username"]},"enabled":true,"deleted":false,"hidden":false,"global":false},"actions":{"disallow":["abusefilter-disallowed-repetitious-username"]}}

Actions to take when matched

Trigger actions only if the user trips a rate limit

Number of actions to allow:

Period of time (in seconds):

Group throttle by:

user

See the documentation on mediawiki.org.

Trigger these actions after giving the user a warning

System message to use for warning:

Page name of other message:

(without "MediaWiki:" prefix)

Prevent the user from performing the action in question

System message to use for disallowing:

Page name of other message:

(without "MediaWiki:" prefix)

Revoke the user's autoconfirmed status

Tag the edit in contributions lists and page histories

Tags to apply:

(see Wikipedia:Tags for use and formatting)

(please don't rename a tag here, see link above)

(one per line, no commas, publicly visible)