I was informed by @Agent_Isai that the IPInfo extension is currently restricted to stewards and system administrators not because of privacy concerns as I originally thought, but rather because of technical issues that are causing the extension to not work properly. Since it appears that IPInfo does not actually produce CheckUser-like data as I thought, and therefore is not a PII situation, I propose that the extension be unrestricted upon upgrade to MediaWiki 1.40, though if it still doesn't function properly perhaps a warning could be added to ManageWiki along the lines of "this extension probably doesn't work, use at your own risk. Complains about it not working will be ignored".
Description
Description
| Status | Assigned | Task | ||
|---|---|---|---|---|
| Resolved | Agent_Isai | T11308 Upgrade to MediaWiki 1.41 | ||
| Resolved | Universal_Omega | T10916 Prepare for MediaWiki 1.41 | ||
| Resolved | None | T10612 Upgrade to MediaWiki 1.40 | ||
| Resolved | None | T10680 Test extensions for MediaWiki 1.40 | ||
| Declined | Agent_Isai | T10826 Unrestrict IPInfo extension |
Event Timeline
Comment Actions
With IP Masking coming up, I'm unsure if this can be considered. Only CVT (not sysadmins) have access to it but it is completely broken outside of Betaheze. This will be dependent on whether this can be fixed on Puppet and on what we decide to do with IP Masking coming up.
Comment Actions
IPInfo is most definitely going to expose private data once IP Masking starts but it's minimal (geographic location and ISP). The WMF are asking users to agree not to share the data but no full NDA needs signing.
We need to evaluate what we require.
Comment Actions
Going to cc @Owen into this conversation as this is also a legal question concerning personally identifiable information.
Comment Actions
For now, I'm erring on the side of declining while we see how IP Masking rolls out. Once we have more information on that and how it'll work/look like in MediaWiki, we can reconsider this as it'll be a hassle to suddenly yank this from users in the future.