ArbCom mailing list archive leaked

On Thursday, June 23, a user going by the name of "MaliceAforethought" began leaking selected email threads of Arbcom-l, the Arbitration Committee's non-public mailing list, on Wikipedia Review. The issue was promptly noted on the Committee's talk page.

On June 27, arbitrator (and list admin) Roger Davies stated that "we have not established the source of the data theft though our investigations are continuing", dismissing the conclusion of an earlier investigation that had indicated the leak was probably the result of an unauthorized person gaining access to the Yahoo email account of one arbitrator, whose access to all private mailing lists and wikis was temporarily revoked. Another arbitrator, who had been inactive since February, returned to editing on Friday, June 24. As he did not respond to emails, when he edited again the following day, his account was globally locked, and his special permissions and mailing list accesses were temporarily revoked, but then reinstated after the Committee confirmed his identity. Roger Davies later emphasized that "there is no credible evidence at all to suggest that [these two arbitrators] were responsible, either directly or indirectly". He also told The Signpost he was "unaware of any evidence, credible or otherwise, implicating any other arbitrator", and noted that the entire list archive appears to have been compromised, going back to July 2005. At the time of writing, the leaker was continuing to post new threads purporting to be from the Arbcom-l archives, which have amounted to around 20 threads so far.

Also on June 27, the Mailman site password was changed ^{dead link}. A further announcement about these security issues is expected in the next few days.

While the leaks so far do not appear to have revealed any particularly controversial actions of ArbCom, there has been great concern about the amount of personal information revealed, not only about ArbCom members but also – as arbitrator Kirill Lokshin pointed out – within "the various material (including evidence, complaints, requests for assistance, and so forth) submitted by other editors [to the list]; in many cases, this correspondence includes personal information (real names, addresses, telephone numbers, ages) whose release could have negative consequences for editors and non-editors with no relation to the Committee". In a related discussion, the long-term retention of Checkuser data was questioned. As explained by Dominic, efforts have already been underway to address such concerns: The archives of the closed Checkuser-l mailing list are currently being removed, in favor of a recently established private Checkuser wiki that is intended only to "host the data from investigations that actually needs to be retained for the future due to persistent abuse". According to Kirill Lokshin, a similar solution has been considered for Arbcom-l (involving the existing Arbcom wiki), but it "would be prohibitively time-consuming for arbcom-l due to the immense volume of the archives; and there have been security concerns with the arbitration wiki as well."

In 2009, there had already been concern about a former arbitrator publishing selected e-mails from the Arbcom-l archives (obtained while authorized) on an external site.

See also a current RfC on account security and last year's Signpost coverage of an assessment of Wikipedia's password security, including a list of former incidents where user accounts had been compromised.

WikiLove to be rolled out on the English Wikipedia, flanked by new research

On the Wikimedia Foundation's blog, a new tool was announced last week, called WikiLove (after the concept). WikiLove has been developed into a MediaWiki extension (after first becoming available three months ago as a user script), and is currently in testing at the prototype wiki. The tool, which displays only on userpages, is represented by a red heart icon on the edit bar. Clicking on it will open a menu with options for giving awards: specifically, barnstars, various food and drink items, kittens, as well as an option to make your own award. The tool is designed to be simple and elegant; the user need only fill out a few fields and select an image or barnstar, and the message is even auto-signed.

Users are encouraged to go to the Prototype Wiki, create an account, and experiment with the tool (note: because of a known bug, creating an account requires editors to check the Remember Me box). WikiLove will be rolled out of testing on June 29, 2011 (assuming no last-minute delays), and the English Wikipedia will be first to receive it. Users can opt to disable it by going to My Preferences → Editing → Labs Features, and disabling the experimental feature. WikiLove also automatically updates special databases to help study its impact on Wikipedia, and the designers are looking into related tools for welcoming and encouraging new editors.

The Foundation's announcement describes some motivations for the introduction of the new tool: A recent survey on Wikipedia editors (see previous Signpost story) found that among 17 choices, being looked down on by more experienced editors is the most common reason for editing less (69%), and receiving praise from others is the most common reason for editing more often (78%). In addition, recent results on newbie teaching strategy trends from the Wikimedia Summer of Research have shown that the number of warnings and criticisms that new editors receive has increased, combined with "a significant drop in messages including praise and thanks", as shown in the graphs above.

In brief

• WMF moves to defend public domain: As announced earlier ( Signpost coverage), the Foundation has joined forces with several educational institutions to support an Electronic Frontier Foundation Amicus brief regarding the Golan v. Holder case. The case stems from US acceptance of the Berne Convention in 1994, an act which granted copyright protection to several foreign works that were previously in the public domain according to the Copyright Act.
  Last week, Geoff Brigham, the General Counsel of WMF, announced that the amicus brief had been filed, and explained the relevance of the case to Wikimedia "in light of the tremendously important role that the public domain plays in our mission": "To put it bluntly, Congress cannot be permitted the power to remove such works from the public domain whenever it finds it suitable to do so. It is not right – legally or morally." More information, including the Amicus brief, is available on the EFF page.

  

• Closing projects policy to become official: An updated process for closing and deleting defunct Wikimedia projects was accepted by the Wikimedia Board this week. Wikimedia projects are closed and sometimes deleted when they are deemed terminally inactive by the community (a list of all closed projects is available here). Debates generally center on whether inactivity or an opportunity for growth is more important. However, it lacks a coherent model for determining majority, which can result in single users occasionally acting in ways that are at odds with the discussion. Originally drafted by Language committee member SPQRobin, the new framework aims to standardize the operation by leaving the ultimate decision to the Language committee, which reports to the Board of Trustees. This is more consistent with the parallel Language proposal policy, and it is hoped that the new framework will make closing discussions more meaningful. Because of objections by the community, as of writing, the policy has been put under review again.
• Two new advisory board members: Last week, Jessamyn West ( Board vote) and Veronique Kessler joined the Wikimedia Foundation's advisory board. In the debate about Wikipedia's gender gap earlier this year, West, a US librarian, had contributed insights from her work as community manager at Metafilter ( Signpost coverage). Kessler is the outgoing Chief Financial and Operating Officer (CFOO) of the Foundation (having been in office since February 2008 and leaving at the end of this month).
• Wikimedia and libraries: A posting on the Foundation's blog covered various aspects of " Wikimedia and libraries – a symbiotic relationship", such as the appearances by Liam Wyatt at the EIFL (Electronic Information for Libraries) General Assembly in Minsk, Belarus ( slides), and by Sue Gardner in the President's Program of the American Library Association's annual convention (both last weekend). According to a summary of her talk, she "showed slides of the rather lavish offices of Google and compared them with Wikipedia’s semi-shabby facilities" and answered a question about COI edits by remarking that Wikipedias are "vigilant in their defense of editorial integrity". Asked about upcoming changes, she said that "we are looking for ways to increase serendipity".
• IRC office hours, fundraiser test: The log for the June 23 IRC office hour with Sue Gardner has been posted. One of the topics was the recent test of fundraising banners (in preparation for the end of the year donation drive), where one of the much-used personal appeals by Jimmy Wales was for the first time outperformed in donations by one from another person, Wikimedia tech staff member Brandon Harris ( User:Jorm). As explained on his personal blog, the appeal was crafted by the Community Department's newly hired "storytelling" team, based on an interview. Gardner commented that "This was a huge big deal, because the implication is that we can crack the code – we can successfully augment Jimmy with other folks who are just as appealing. It's good news for the financial sustainability of the movement" (a topic that has concerned WMF recently in preparation of the annual plan; also, the new position of Director of Sustainability was recently posted to the Foundation's job openings page).
• Majority of Wikipedians are multilingual: A series of blog posting about the results of the Foundation's recent editor survey continued by hightlighting the result that the " Majority read and edit more than one language Wikipedia".
• List of large languages without Wikipedias: Millosh has posted, via the foundation-l mailing list, a rough sketch of languages with more than a million and more than 100,000 speakers who remain unserved by a Wikipedia project in their native language, in a country with an existing Wikimedia chapter. India has 45 languages with more than a million speakers, Indonesia 15, and the Philippines 6. There are dozens of languages over the 100,000 mark without a project. However, the list is very rough; the many variations of Chinese have not been included, and several sign languages (which would be difficult to put into text) have been included in the list. Nonetheless, it has been pointed out that the list might be valuable for future wikis. In May, Millosh had already posted a similar list of "Missing Wikipedias" ( Signpost coverage).
• Larry Sanger re-enters Citizendium leadership: Nine months after the free wiki-based online encyclopedia Citizendium had adopted a charter (consisting of 55 articles laying a constitution-like foundation for the project's governance), and its founder Larry Sanger was replaced (as planned) as editor-in-chief by an elected "Management Council" ( Signpost coverage), project members voted to modify the charter by four amendments, and elected new Management Council members, among them Sanger (with 22 votes, the second-highest number).
• National Portrait Gallery remedies Wikipedia plagiarism: In March (Signpost coverage: " "Copyright irony": UK's National Portrait Gallery appears to have copied from Wikipedia without permission), Wikipedians had reported text on the website of the UK's National Portrait Gallery that was obviously copied from Wikipedia without attribution. After the matter was brought up again on Foundation-l earlier this month ( NPG still violating copyright")", the NPG was contacted a second time by the WMF's " GLAM fellow" Liam Wyatt User:Witty lama, and removed the offending text. In 2009, The National Portrait Gallery started a widely publicized controversy by threatening a lawsuit in English courts against Derrick Coetzee, a Wikipedia and Commons administrator, who had used a software tool to upload photographs of out-of-copyright paintings from the gallery's website to Commons (see Signpost coverage). While such copying is legal under U.S. law according to Bridgeman Art Library v. Corel Corp., the legal situation in the UK is unclear. The December 2010 GLAM-WIKI conference in London ( Signpost coverage) saw a dialogue between Wikimedians and a representative of the NPG.

← Previous "News and notes"

Next "News and notes" →

In this issue

27 June 2011 ( all comments)

News and notes

In the news

WikiProject report

Featured content

Arbitration report

Technology report

+ Add a comment

Discuss this story

These comments are automatically transcluded from this article's talk page. To follow comments, add the page to your watchlist. If your comment has not appeared here, you can try purging the cache.

Wiki-Love was pretty cool 6 years ago when it was WP:Esperanza. Night Ranger ( talk) 01:10, 28 June 2011 (UTC) reply

I liked the Esperanza idea more. / ƒETCH COMMS / 02:00, 28 June 2011 (UTC) reply

What's the meaning of the "green blob" in the language committee logo? I stared at it for 5 mins and couldn't deduce any meaning out of it. OhanaUnited ^{Talk page} 02:19, 28 June 2011 (UTC) reply

Rosetta Stone is my guess. W i k i C o p t e r 02:26, 28 June 2011 (UTC) reply

Yes, the description of the image says Rosetta Stone. Sumsum2010· T· C 03:24, 28 June 2011 (UTC) reply

Maybe some lines of text on the blob would help ... — Cheers, JackLee ^{– talk–} 04:53, 29 June 2011 (UTC) reply

• "While the leaks so far do not appear to have revealed any particularly controversial actions of ArbCom" *blinks* Um...alright, if you say so. I understand that the Signpost probably wouldn't want to comment on the controversial actions, since that means they would be commenting badly about Arbcom and such, but still, there's more than enough stuff in there that can be deemed "controversial". Silver seren ^C 04:28, 28 June 2011 (UTC) reply

I personally find ArbCom to be a load of horse pork. I find all administrator things boring in general, but ArbCom is a whole new level of tedium. My advice is just to backpedal away from these sorts of things. _{If you don't get it, horse pork is a contradiction} Res Mar 17:24, 28 June 2011 (UTC) reply

I agree with Resident Mario that ArbCom can be a whole new level of tedium sometimes, and I'm on the darn thing. Newyorkbrad ( talk) 03:25, 29 June 2011 (UTC) reply

I work in an area of engineering that is especially prone to industrial espionage (electronic toys) and we use the following method as an anti-leak countermeasure; every so often, we send out multiple versions of a particular email with slightly different wording. Sometimes just a few recipients get a variation, sometimes half of them do (with a different split each time). That way, if an account is compromised, the content of the leaked emails contains a hard-to-obfuscate signature identifying which account is leaky. Has anyone at Wikipedia considered using such a system? -- Guy Macon ( talk) 04:50, 28 June 2011 (UTC) reply

That's a good system if you want to identify employees who leak stuff broadcast to them, but within one committee you have the slight awkwardness of deciding who gets to be monitor and who gets to be monitored. You also need a completely different design for the archives as everyone who has access has access to the same archive, and we don't want to shift to a broadcast system as we don't want each of these arbs having their own archive on their own kit. But as we need to shift to a different system in order to delete stuff it would be good if we could introduce something like this as well. Ϣere SpielChequers 19:28, 28 June 2011 (UTC) reply

This would require some back-end programming of the archive system, so it might not be feasible - if I was in charge of making it happen it I would ask the developers and follow their advice. As for who does the monitoring, in the toy industry we usually choose someone with good analytical and technical skills who doesn't know the members of the mailing list or care about the issues they deal with. Using that as a guideline, everyone on the arbcom mailing list - including Jimbo - would be monitored. Another thing that we find to be helpful is to do penetration testing; while some might assume that a mailing list leak implies malfeasance or carelessness on the part of a list member, it could just as easily be true that someone used a brute-force password guessing program with a large dictionary or installed a keylogger on their PC. A good security consultant will identify any weak passwords and find any malware. All this is a bit of a pain, but less so than having confidential information leak out. Guy Macon ( talk) 15:19, 29 June 2011 (UTC) reply

Citizendium

• Citizendium is not Wikipedia. I fail to see why the Signpost insists on reporting on it. Sven Manguard Wha? 04:55, 28 June 2011 (UTC) reply

Seriously, I don't know why anyone still talks about them. That project has been dead in the water for years. - Burpelson AFB ✈ 17:29, 28 June 2011 (UTC) reply

My thoughts exactly. Res Mar 22:28, 28 June 2011 (UTC) reply

I can understand why Citizendium gets attention on The Signpost: Sanger was a founder of Wikipedia, & C. is his current project. However, it is becoming ever more clear that C. is a failed project, & despite his continuing efforts to show he is still relevant Sanger is becoming ever more marginalized. I agree with everyone else that The Signpost would benefit from dropping its coverage of both unless something undeniably newsworthy happens. Such as either Sanger or someone associated with C. wins an award -- or is indicted for committing a felony. -- llywrch ( talk) 02:50, 29 June 2011 (UTC) reply

Citizendium is family. It's the most famous fork of Wikipedia, even if it's done nothing of wide note in a long time. Marginal, though (and I'm saying that as the person who suggested this news item). Their previously raised funds run out in September, we'll see if they have sufficient interest amongst themselves (if the common "let's fund our hobby" model is sufficient) or the lights go out - David Gerard ( talk) 08:01, 29 June 2011 (UTC) reply

OK, to explain what made me write up David's suggestion for this Signpost issue: There is, or have been, various aspects of Citizendium that make its development newsworthy for Wikipedians/Signpost readers. One is the competitor aspect, which was dominant in 2006/07 (OMG Wikipedia is doomed because its co-founder used his supreme insights about online communities to create a superior project), but it has become quite clear that Citizendium is unlikely to draw many readers or writers away from Wikipedia. Another one is the "family" aspect (what is our former chief organizer doing now?). A third aspect, which I advocated in a talk about Citizendium at Wikimania 2009 and consider the most relevant, is the unique value that Citizendium has as a testing ground for various perennial proposals that have been suggested countless times for Wikipedia, but are considered too disruptive to test out here. These include enforcing real names, special authority for "expert" editors, approved (stable) article version, and since last year, the charter, which is another interesting departure from Wikipedia "any policy is editable"/IAR culture. I believe that Citizendium's successes or, so far mostly, failures with these hold valuable insights for Wikipedians that are difficult to come by elsewhere, and that's why it is worth following them as a Wikipedian.

The present news is an update on how one of these innovations, the attempt to base the project on a stable "constitution", is turning out in practice (btw: diff of the changes), and also interesting in light of the expectations last year that it would enable the project to continue without its founder. The number of votes mentioned gives an idea of the size of the active community. I realize that not all readers are aware of the same amount of context, and that not all goings-on at Citizendium are worth reporting here.

Regards, HaeB ( talk) 12:58, 30 June 2011 (UTC) reply

I understand your point. However, as the notice currently reads it sounds like episode 245 of a soap opera which has been repeating its material for some time. Or even less favorably, like a paragraph on one of the countless Trotskyite splinter groups which spend more time arguing over political purity than actually doing anything. A more in-depth article & discussion on events which support HaeB's justification might prevent the criticism I & others raised. (And if an event doesn't deserve that much attention, then Signpost is probably better off without it.)

As for the "testing ground for various perennial proposals" argument, why not offer some updates about Wikinfo, which is perhaps the oldest fork of Wikipedia still in existence? (IIRC, it was created back in 2004.) I had a peak at it a few months back, & was surprised not only to find it still in existence, but with a determined handful of members working away. And with far more articles than Citizendium ever produced. -- llywrch ( talk) 03:25, 1 July 2011 (UTC) reply

WikiLove

It may have been worth mentioning the relatively high amount of media attention that the WikiLove extension received, e.g. [1], [2], [3], [4]. Reagrds, HaeB ( talk) 06:02, 28 June 2011 (UTC) reply

There's a more complete list here. Kaldari ( talk) 06:12, 28 June 2011 (UTC) reply

• Regarding orthography of American Sign Language, see one person's proposal. No such orthography has gained widespread adoption, but I think it's an intriguing concept. Dcoetzee 11:02, 28 June 2011 (UTC) reply
• If Wikimedia had better video software, you could have a video-only sign language Wiki, perhaps? At least it could function like spoken articles, but perhaps you could set up a set of standard video of sin language words and string them together to get the equivalent of computer voice-rendered text. Rmhermen ( talk) 16:21, 29 June 2011 (UTC) reply
• Please disambiguate Copyright Act... -- _{Piotr Konieczny aka Prokonsul Piotrus| talk} 16:01, 28 June 2011 (UTC) reply

• What are you talking about with WikiLove being on the prototype wiki? It is on the english wiki and is as a script. — Preceding unsigned comment added by 99.249.130.76 ( talk) 16:16, 28 June 2011 (UTC) reply
  • The official extension is on the prototype wiki. The script is older. / ƒETCH COMMS / 17:39, 28 June 2011 (UTC) reply

• This probably isn't the right place for to make this comment, but 'Wikilove' is an awful and highly unprofessional name for a permanent feature. What's the matter with something like 'compliment'? Nick-D ( talk) 05:54, 3 July 2011 (UTC) reply

It's not brilliant, but I quite like it. The Cavalry ( Message me) 10:52, 3 July 2011 (UTC) reply