How effective is checkuser? Options

[Ather]

If I wanted to run several accounts how likely is checkuser to pick me up? If I changed my IP each time I logged on how would they trap me? How long to they log IP addresses for? Do they keep a permanent record of my account creation IP? Do they record me logging on but not editing? What other info do they store and for how long? All this info is needed purely for research purposes

[gomi]

This site shows you in a readable way what your browser string and other "checkuser" information looks like. It leaves out one string, "referrer", which is what page you came from, which CU also includes, and a few HTTP headers like XFF (forwarded-for, which identifies proxies). Here is one that shows all the headers, but doesn't break out the browser string pieces. There are a million of these around the web.

This page documents the interface adequately.

The only open question is whether they retain the user creation IP forever. I think they do, but don't have any proof in the code, because I can't be bothered to go look at it.

Note also that nothing in Wikipedia's checkuser data retention policy will help you if a CU wants to salt away results in a file on his or her computer for months or years. Other than that, it would appear that CU data on en.wp is retained for 90-120 days.

There are Firefox add-ons for changing your browser string and your referrer. If you're going to sock, then use them.

[Cock-up-over-conspiracy]

There are Firefox add-ons for changing your browser string and your referrer. If you're going to sock, then use them.

The only addition I would make is that if you are playing around with changing your browser string, also change your screen resolution to match each "user". Make it a little bit harder for them.

I would agree though that CU admins will:

a) lie if necessary
b) guess blind
c) get it complete wrong
d) defy all logic if necessary
e) keep copies of data for far longer than 3 months on home computers. I have seen Thatcher admit to this and he is amongst the more honest and principled of them. That would suggest to me that the less honest and principled of them are up to much worse.

Just understand that Pee-dia admins really don't have to care at all and some admins will throw blocks around anyway. They are into repression.

Its a game. You are likely to get caught out for other stuff. But it might be a good exercise to develop various characters if you are interested in developing your screenwriting, or investigative skills. Look upon it positively and make some good out of it.

Never hit that submit button in a moment of emotion. If you ever blow your own cover by not logging in ... just kill the operative ID and IP.

I hope you are using all this for something remotely ethical. The Pee-dia needs more ethical activists.

[taiwopanfob]

e) keep copies of data for far longer than 3 months on home computers. I have seen Thatcher admit to this and he is amongst the more honest and principled of them. That would suggest to me that the less honest and principled of them are up to much worse.

The amount of space needed to store the uid/IP bindings and all other wiki-surveillance output for the entire history of Wikipedia would be microscopic compared to the rest of the database.

This is a strong hint that any storage limits that supposedly exist are for a purpose other than mere disk space.

The privacy charade?

Which in turn suggests that anyone off-lining the data may not be operating within the Rules and Regulations. But even if permitted, how could such "evidence" be the basis for any argument? Thatcher or anyone else can synthesize any amount of "evidence" and declare they downloaded it from the inner sanctum before it was -- conveniently -- erased.