Wikipedia:破壞
破壞係指專登透過插入、拎走或者修改內容去降低維基百科全書質素嘅行為。最普遍嘅破壞包括插入猥褻、誹謗或者其他唔三唔四嘅內容,又或者洗晒成版嘢。
雖然有啲維基人嘅行為可能違反咗維基社群嘅共識或者守則,但係只要佢哋懷有改進維基百科嘅善意,咁就唔計破壞。另外,編輯戰都唔計破壞。你要諗清楚,先至可以分到到底邊啲改動有益,邊啲係好心做壞事,而邊啲係破壞。如果將人哋嘅善意改動攪錯做破壞,咁就唔好喇!
任何人都有權發現同處理破壞,如果你處理唔到破壞,麻煩你話畀其他人聽。
2002年IBM嘅研究表明,英文維基百科入面大多數明顯嘅破壞會喺五分鐘內畀人整返好。但係,破壞依然可能影響所有用戶,喺你編輯一個頁面之前,唔該先檢查一下呢個頁面嘅歷史,睇下有冇漏網嘅破壞。
唔係所有破壞都係顯眼嘅,亦唔係所有大量嘅或者有爭議嘅修改都係破壞,喺確認新數據或者資料係唔係正確,或者係善意動機下嘅錯誤,或者係全然嘅破壞嗰陣,大家要小心。
Useful ways to detect vandalism include:
- Recent changes patrolling, using the recent changes link to spot suspicious edits
- Keeping an eye on your watchlist
- The edit history of an article can be checked for recent suspicious edits. Article size, as given in bytes, usually increases slightly with time, so a sudden large decrease may indicate a section blanking. Similarly, if an article's size change is inappropriately large for the stated edit summary (e.g. "Fixing typo"), it's an indication of vandalism.
In all the three methods above, examples of suspicious edits are those performed by IP addresses, red linked, or obviously improvised usernames. A good way to start is to click on every edit in watchlists, histories etc. with the least suspicion of being vandalism. Increased experience will probably give a sense of which edit descriptions are worth to check further and which may likely be ignored. Some descriptions like "Fixed typo" may be vandalism as that is one of the default edit summaries. IP editors should not be approached with the assumption that they are vandals. Although many vandals do vandalize without registering an account, there are many IP editors who are great contributors to Wikipedia. Always read the actual changes made and judge on that, rather than who made the changes or what was entered in the edit summary.
- See the what links here pages for Insert text, Link title, Headline text, Bold text and Example Image to detect test edits. (See also {{toolbar experiments}}).
- The auto-summary feature can also help users spot vandalism.
- Viewing the abuse log or this version[1] if the regular abuse log is cluttered by spambots.
- Watching for edits tagged by the abuse filter. However, many tagged edits are legitimate, so they should not be blindly reverted. That is, do not revert without at least reading the edit.
- Plausible, subtle changes not supported by sources or by text elsewhere in the article, particularly without an edit summary, may suggest vandalism. Changing numbers, sometimes by 1, is a common stealth tactic.
How to respond to vandalism
- WP:RVAN
If you see vandalism in an article, the simplest thing to do is just to remove or undo it, but sometimes vandalism takes place on top of older, undetected vandalism. With undetected vandalism, editors may make edits without realizing the vandalism occurred. This can make it harder to detect and delete the vandalism, which is now hidden among other edits. Sometimes bots try to fix collateral damage and accidentally make things worse. Check the page history to make sure you're reverting to a "clean" version of the page. Alternatively, if you can't tell where the best place is, take your best guess and leave a note on the article's talk page so that someone more familiar with the page can address the issue—or you can manually remove the vandalism without reverting it.
If you see vandalism on a list of changes (such as your watchlist), then revert it immediately. You may use the "undo" button (and the automatic edit summary it generates), and mark the change as minor. It may be helpful to check the page history to determine whether other recent edits by the same or other editors also represent vandalism. Repair all vandalism you can identify.
For a new article, if all versions of the article are pure vandalism, mark it for speedy deletion by tagging it with {{Db-g3}}
.
To make vandalism reverts easier you can ask for the rollback feature to be enabled for your registered Wikipedia account. This feature is only for reverting vandalism and other obvious disruption, and lets you revert several recent edits with a single click. See Wikipedia:Requests for permissions.
If you see that a user has added vandalism you may also check the user's other contributions (click "User contributions" on the left sidebar of the screen). If most or all of these are obvious vandalism you may report the user immediately at Wikipedia:Administrator intervention against vandalism, though even in this case you may consider issuing a warning first, unless there is an urgent need to block the user. Otherwise, you can leave an appropriate warning message on the user's talk page. Remember that any editor may freely remove messages from their own talk page, so they might appear only in the talk history. If a user continues to cause disruption after being warned, report them at Wikipedia:Administrator intervention against vandalism. An administrator will then decide whether to block the user.
For repeated vandalism by an IP user it is helpful to trace the IP address (e.g. http://whois.domaintools.com/) and add {{whois|Name of owner}}
to the user talk page of the address. If it appears to be a shared IP address, add {{SharedIP|Name of owner}}
or {{Shared IP edu|Name of owner}}
. The OrgName on the IP trace result should be used as the Name of owner
parameter in the above three templates.
For beginners
For relatively inexperienced Wikipedians, use these simple steps to quickly respond to what you consider vandalism. This is essentially an abridged version of Wikipedia:Vandalism.
- Assess whether the edit was made in good or bad faith. If in good faith, it is not vandalism as such, so question the accuracy of information on the talk page or add an inline cleanup tag, such as a "{{dubious}}" tag, to the disputed edit. If it is in bad faith, then it is vandalism and you may take the appropriate steps to remove it.
- Revert the vandalism by viewing the page's history and selecting the most recent version of the page prior to the vandalism. Use an edit summary such as 'rv/v' or 'reverted vandalism' and click on 'Publish changes'.
- Warn the vandal. Access the vandal's talk page and warn them. A simple note explaining the problem with their editing is sufficient. If desired, a series of warning templates exist to simplify the process of warning users, but these templates are not required. These templates include
- Level one: {{subst:uw-vandalism1}} This is a gentle caution regarding unconstructive edits; it encourages new editors to use a sandbox for test edits. This is the mildest warning.
- Level two: {{subst:uw-vandalism2}} This warning is also fairly mild, though it explicitly uses the word 'vandalism' and links to this Wikipedia policy. It is the first to warn that further disruptive editing or vandalism may lead to a block, however it uses the wording "loss of editing privileges" rather than "block".
- Level three: {{subst:uw-vandalism3}} This warning is sterner. It is the first to warn that further disruptive editing or vandalism may lead to a block while actually using the word "block".
- Level four: {{subst:uw-vandalism4}} This is the sharpest vandalism warning template, and indicates that any further disruptive editing may lead to a block without warning.
- Level four-im: {{subst:uw-vandalism4im}} This warning template should be used only in the worst conditions of vandalism. It indicates that this is the only warning the target will receive, and that further disruptive edits will result in a block without warning.
- Watch for future vandalism from the vandal by checking the user's contributions. If bad faith edits continue, revert them and warn them again, letting the users know that they can be blocked. Note that it is not necessary to use all four warning templates in succession, nor is it necessary to incrementally step through warnings.
- Report vandals that continue their behavior after being warned to Wikipedia:Administrator intervention against vandalism. While not strictly required, administrators there are most likely to respond rapidly to requests which include at least two warnings, culminating in the level-four "last chance" template.
Template and CSS vandalism
If no vandalizing edits appear in the page's edit history, or the vandalism obscures the page tabs so you can't easily access the history or edit the page, it is probably template or Cascading Style Sheets vandalism. These are often not difficult to fix, but can be confusing.
To access the page history or edit the page when the "View history" or "Edit" tabs are inaccessible, use Wikipedia keyboard shortcuts. You can also access the history through a vandalism patrolling tool if you're using one, or from your watchlist if you are watching the page), or from your user contributions if you have edited the page. Or, enter the URL manually into the address bar of your browser: it will take the form https://www.search.com.vn/wiki/en/Name_of_article?action=edit
or https://www.search.com.vn/wiki/en/Name_of_article?action=history
.
If vandalizing edits do not appear in the page history, the vandalism is likely in a transcluded template instead of the page itself. To find the template page, edit the article (using Wikipedia keyboard shortcuts if necessary); toward the bottom of the edit page is a list of all templates transcluded into the page. Look for vandalism in the transcluded templates not protected. Alternatively, look for {{Template name}} or {{Template name|parameter ...}} in the text, approximately where the vandalism appears, then go to the page Template:Template name and revert any vandalism. When you return to the original page, the vandalism should be gone, though you may need to purge the page.
Image vandalism
Images are occasionally used for vandalism, such as by placing shock or explicit images where they should not be. When an image has been created exclusively for vandalism, it can be requested for speedy deletion: under criterion G3 if hosted on Wikipedia or as vandalism if hosted on Commons (a file repository for Wikimedia Foundation projects). When an image is used for vandalism due to its explicit nature but has legitimate encyclopedic uses (Wikipedia is not censored) or is hosted on Commons and has legitimate uses on other projects, it can be requested for being added to the bad image list, which precludes its addition on any page except those specified.
How not to respond to vandalism
- WP:NORESVAND
- Do not nominate a page for deletion because it is being vandalized. If a page is persistently vandalized, consider requesting protection of the page at Wikipedia:Requests for page protection.
- Do not feed the trolls. Fanning the fire will only serve to make the situation worse. Similarly, do not insult the vandals. If someone is doing something they know is wrong, insulting them over it is likely to make them vandalize more, just to get that reaction. Furthermore, Wikipedia is not the place for personal attacks, it is not a battleground, and two wrongs don't make a right. Instead, report them to the administrators if they continue.
- Avoid the word "vandal". In particular, this word should not be used to refer to any contributor in good standing nor to any edits that might have been made in good faith. This is because if the edits were made in good faith, they are not vandalism. Assume good faith yourself; instead of calling the person who made the edits a "vandal", discuss your concerns with them. Comment on the content and substance of the edits, instead of making personal attacks.
Warnings
Template:WarningsSmall
- WP:WARNVAND
The purpose of warning a user who has vandalized is to inform the user that the user's conduct is abusive and prohibited, and seek the user's compliance. Not all that appears to be vandalism is in bad faith, and a warning can politely advise and correct users unaware of the nature of their actions. A warning may even dissuade a user acting in bad faith from continuing, particularly as the warnings escalate and the user is informed of the consequences of continuing.
Warning a user for vandalism is generally a prerequisite to administrator intervention. Because of this, users should be warned for each and every instance of vandalism.
How to warn vandalizing users
A list of user warning templates, with descriptions and instructions for their use, is at Wikipedia:Template messages/User talk namespace. In addition to a series of user warning templates for vandalism, there are series for specific types of vandalism. Use the most specific user warning template for the conduct. The existence of these templates is intended as a convenience, and their use is not required. A specifically tailored note, written personally and directly addressing the problematic behavior is equally as acceptable as a form of warning, and in many cases, will often result in better engagement with the user in question.
Assume good faith (such as that the user is simply unaware of the policies and guidelines) unless it is clear that the user is deliberately harming Wikipedia from the outset, such as the use of abusive, vulgar, or juvenile vandalism.
If you do choose to use warning templates, please choose templates that are appropriate to the type and level of problem in question. If edits are questionable, but not clearly vandalism, consider using lower-level templates (level 1 or 2) and wait for a few further contributions to see if the other editor responds or changes their behavior. If the behavior continues, or if it is clear the edits are in bad faith from the outset, the use of a higher-level template (level 3 or 4) may be appropriate. If, after receiving multiple warnings, the behavior persists past the point where good faith can be extended, or it becomes clear that the user has had the opportunity to notice they have been warned, and they still persist with the problematic behavior, consider reporting them to the Vandalism noticeboard.
Administrator response to vandalism
Response from administrators at the vandalism noticeboard varies depending on the type of vandalism and the specifics of the report. Keep in mind:
- Admins are unlikely to block a user who has not been warned at all, or who has been warned, but has stopped editing since being warned. It must be clear that the user has been told to stop vandalizing, and still persists despite such warnings, except for egregious cases.
- Reports of vandalism from registered accounts are handled differently than that from IP users, and reports from newly registered accounts are handled differently from accounts of experienced Wikipedia users.
- IP addresses may or may not be kept by the same person for long periods of time; a dynamic address which appears to have stopped vandalizing will probably not be blocked, while one that is actively vandalizing will likely receive a short (1–2 day) block. If there is evidence that an IP address is being used by the same person over a long period of time to repeatedly vandalize Wikipedia, or if it is clear the IP address is being used by multiple people to vandalize Wikipedia (such as a school-based IP, which can sometimes attract lots of juvenile vandalism over long periods of time from many different people) then an administrator may block the IP for a longer time period (several months to a year). IP addresses are almost never blocked indefinitely.
- Brand-new accounts who repeatedly vandalize despite multiple warnings are usually blocked indefinitely, especially when there is no history of quality editing on the account.
- Reports which involve experienced Wikipedia users rarely result in blocks for vandalism, as these reports are usually mislabeling other problematic behavior (such as misrepresenting sources, or removing text, or edit warring) as vandalism. The vandalism noticeboard is not designed to litigate disputes or to investigate complex behavior problems. Instead, other noticeboards such as the edit warring noticeboard or the incidents noticeboard are more appropriate to deal with those issues.
- Check back in to the vandalism noticeboard to see how your report has been dealt with. If an administrator declines to block someone you report, they will always leave a note explaining why they did not respond as you requested. Often, this does not mean the person you reported is behaving properly, or should not be dealt with, but merely that the mechanisms of the vandalism noticeboard are not well suited for handling many types of reports. Consider taking the issue up at a more appropriate noticeboard, which has been tailored to the specific type of problem you are seeing. Other times, a report is declined for being stale (blocks to abandoned accounts, or to IP addresses which have been dormant for some time are rarely done), or to the admin being unable to easily identify the edits as vandalism.
- If the vandalism in question is "sneaky vandalism", is being committed by a person who was blocked under a prior account or IP address, or requires in-depth and direct knowledge of a prior problem, consider taking the report to the incidents noticeboard instead. There are hundreds of Wikipedia administrators, and many of them are unfamiliar with the intricacies of past cases. Unless it is the sort of vandalism that needs no explanation at all, it should be taken elsewhere and not WP:AIV.
Reminding responding users to correctly warn
Because warnings for vandalism are generally a prerequisite to administrator intervention, it is important that users responding to vandalism warn vandalizing users. To inform responding users of this responsibility, use the user warning template {{uw-warn}}.
Likewise, incorrect use of user warning templates, even if well-intended, should be identified to the mistaken user. The {{uw-tempabuse}} series of user warning templates may be used, but a detailed talk page message is better.
Tracing IP addresses
- WP:WHOIS
- WP:TRACEIP
The owners of IP addresses can be found using:
- ARIN (North America)
- RIPE NCC (Europe, the Middle East and Central Asia)
- APNIC (Asia Pacific)
- LACNIC (Latin American and Caribbean)
- AfriNIC (Africa)
- IPLigence
- IP-adress.com [sic]
- Find-IP-address.org
- who.is
If an address is not in one registry, it will probably be in another.
Identifying associated IP addresses
If you're trying to determine whether a set of IP addresses involved in vandalism are related, a command-line WHOIS query will generally list this information, or can be shown using the Routeviews DNS name server asn.routeviews.org reverse IP look-up to find the CIDR and ASN for a set of IP addresses. This can be done using IP lookup tools.
A WHOIS query will typically return NetRange, CIDR, NetName, NetHandle, and OriginAS, all of which identify specific network spaces. Data and labeling vary considerably by WHOIS registrar.
The Routeviews data is far more uniformly structured and returns ASN and CIDR as a reverse-lookup TXT query result. It is more useful and faster than WHOIS when checking multiple IP addresses and can be scripted or automated.
CIDR identifies a set of related addresses ("network space") and ASN identifies an Autonomous System—that is, a single administrative entity with control over multiple (and often very many) addresses. Some (though not all) abuse from multiple sources does come from such unified spaces—possibly corresponding to a set of hosts within a single facility.
Abuse originating in a short period of time from different IP addresses within the same CIDR or ASN may indicate a dedicated non-distributed attack, as opposed to a distributed denial of service attack.
Proxies, VPNs and Tor exit nodes
It's possible that a user's source location is being masked by routing traffic through a Proxy server, VPN or the Tor network. Such addresses typically serve many, not just one, person, and though they can be valid present challenges when used for abuse.
A proxy VPN is not necessarily detectable, but commercial services may be indicated by the hostname when resolving an IP address.
Users of the Tor anonymity network will show the IP address of a Tor "exit node". Lists of known Tor exit nodes are available from the Tor Project's Tor Bulk Exit List exporting tool.
Types of vandalism
- WP:VANDTYPES