Wikipedia:Personal security practices
From Wikipedia, the free encyclopedia
 |
This is an essay; it contains the advice and/or opinions of one or more Wikipedia contributors. It is not a policy or guideline, and editors are not obliged to follow it. |
 |
This page in a nutshell: Use caution when posting personally identifiable information online. If you become stalked or harassed through such information, or simply want any identifiable information removed, email a trusted Administrator or Wikipedia:Requests for oversight for discrete and confidential handling of such incidents. |
This page is intended as a guideline for user security concerns and practices on Wikipedia. It adapts some information from the Wikimedia foundation's privacy policy to address some personal security concerns that may arise in the course of editing Wikipedia.
Many of these concerns have to do with the availability of personal information in a public space. If you only read Wikipedia without contributing, no more personal information is collected than is typically collected in server logs by web sites in general.
If you contribute to Wikipedia, however, you are publishing every word you post publicly. If you write something, assume that it will be retained forever. This includes articles, user pages and talk pages.
If you become stalked or harassed on Wikipedia via any information posted about you on-site, whether by you or anyone else, it is recommended that you report this discretely via off-site means, such as email, to a trusted administrator or at Wikipedia:Requests for oversight, which maintains a confidential email service that can be used to request removal of such instances without drawing further attention to them on-site. Edits removed with oversight cannot be seen by anyone but people with access to Wikipedia's database, even those with oversight access.
Contents |
[edit] Identification as an author
When you edit any page in the wiki, you are publishing a document. This is a public act, and you are identified publicly with that edit as its author.
[edit] HTTP Cookies
The wiki will set a temporary session cookie (PHPSESSID) whenever you visit the site. If you do not intend to ever log in, you may deny this cookie, but you cannot log in without it. It will be deleted when you close your browser session.
More cookies may be set when you log in, to avoid typing in your user name (or optionally password) on your next visit. These last up to 30 days. You may clear these cookies after use if you are using a public machine and don't wish to expose your username to future users of the machine. (If so, clear the browser cache as well.)
[edit] Logging in
When you publish a page, or any text, in the wiki, you may be logged in or not.
If you are logged in, you will be identified by your user name. This may be your real name if you so choose, or you may choose to publish under a pseudonym, a fictitious name you select when creating your account.
If you have not logged in, you will be identified by your network IP address. This is a series of four numbers which identifies the Internet address from which you are contacting the wiki. Depending on your connection, this number may be traceable only to a large Internet service provider, or specifically to your school, place of business, or home.
It is possible that the origin of your IP address could be used in conjunction with the pattern of edits in your contribution history to identify you, even by private individuals unknown to Wikipedia. Every edit made with an IP address is logged and publicly accessible.
[edit] Pseudonyms
It may be either difficult or easy for a motivated individual to connect your network IP address with your real-life identity. Therefore, if you are very concerned about privacy, you may wish to log in and publish under a pseudonym.
Many Wikipedians edit under pseudonyms because they wish to remain anonymous. Still, some users registered under pseudonyms make no other attempt to disguise their real identities (for example, by placing their real names, photographs of themselves, or other identifiable information on their user page). True anonymity requires that nothing about the user's actual identity is linkable or inferable from any information posted under the pseudonym.[1] However, true anonymity on Wikipedia is difficult if not impossible to achieve, as Wikipedia's server logs still enable system administrators to determine the IP address, and perhaps the true name, of any registered user (see Wikipedia:Privacy Policy for a list of the conditions under which such a linkage would be attempted); this is not done unless there is a compelling reason (for example, significant vandalism or a law enforcement subpoena).
Because a user's interest areas, writing style, and argumentative positions may establish an identifiable pattern, true anonymity may not be realistically achievable.[2]
[edit] Proxy IPs
It is possible to mask a personal IP by using an Open proxy, a Web server that disguises the user's IP address. However, doing this is against policy, due to their frequent use by vandals (see also Wikipedia:Blocking_policy).
[edit] Editing from work
If you use a company mail server from home or telecommute and use a DSL or cable Internet connection, it is likely to be very easy for your employer to identify your IP address and find all of your IP based Wikimedia project contributions. Using a user name is a better way of preserving your privacy in this situation. However, remember to log out or disconnect yourself after each session using a pseudonym on a shared computer, to avoid allowing others to use your identity.
[edit] Personal information
Wikipedia does not require you to provide personal information on userpages or elsewhere in the course of editing the encyclopedia. While there is no policy forbidding this, remember that information revealed amongst friends and fellow editors on Wikipedia is kept in a permanent record that is accessible by anyone in the world with a networked computer.
It is recommended that you use utmost caution and discretion when revealing information that could be used to personally identify you.
[edit] Interacting with others
While editors are expected to observe WP's behavioral policies, particularly WP:AGF, with regards to editorial conflicts, no user is expected to put editorial policies above their own personal welfare and security. When confronted with wikistalking or other harassment, the best course of action would be to report any concrete instances of this confidentially and discretely via email to a trusted Administrator. It is not advisable to report this activity elsewhere on Wikipedia, such as at WP:AN/I, as this may draw more public attention to whatever potentially compromising information may have been used in the personal attack.
[edit] Passwords
Many aspects of the Wikimedia projects' community interactions depend on the reputation and respect that is built up through a history of valued contributions. User passwords are the only guarantee of the integrity of a user's edit history. All users are encouraged to select strong passwords and to never share them. No one shall knowingly expose the password of another user to public release either directly or indirectly.
Here are some tips that editors should consider to reduce the likelihood that their accounts may be compromised:
- Never give your Wikipedia password to anyone, not even Wikimedia staff.
- Only enter your password on a Wikimedia site. Be aware that other sites use MediaWiki, the software that Wikipedia uses. Users should check that their browser is on a Wikimedia-owned domain.
- Your password should be easy to remember, but hard to guess. "Password" is not a secure password, but ".h$e9b2p3" is (however, do not use this as a password, since it has been divulged as an example). See also Keys to a Strong Password.
- Avoid using public computers to edit while logged in, but if you do decide to log into one, always remember to log out when you are done, and when you return to your private computer, it may be worth changing your password.
[edit] Security of information
The Wikimedia Foundation makes no guarantee against unauthorized access to any information you provide. This information may be available to anyone with access to the servers. A partial list of those people can be found in the developers list.
[edit] User data
Data on users, such as the times at which they edited and the number of edits they have made are publicly available via "user contributions" lists, and in aggregated forms published by other users.
[edit] Removal of user accounts
Once created, user accounts will not be removed. However, it is possible for a username to be changed (see Wikipedia:Changing username and Wikipedia:Changing username/Usurpations). The Wikimedia Foundation does not guarantee that a name will be changed on request.
[edit] Deletion of content
Removing text from Wikimedia projects does not permanently delete it. In normal articles, anyone can look at a previous version and see what was there. If an article is "deleted", any user with "administrator" access on the wiki, meaning almost anyone trusted not to abuse the deletion capability, can see what was deleted. Information can be permanently deleted by those people with access to the servers, but there is no guarantee this will happen every time it is requested.
[edit] Oversight
If personally identifiable or libelous information has been published about you anywhere on Wikipedia, you can request its removal through Wikipedia:Requests for oversight. This information will only be viewable by people with direct access to the Wikipedia databases.
[edit] See also
Policies
Articles
Essays
[edit] Notes
- ^ Post, David G. (1996). Pooling Intellectual Capital: Thoughts on Anonymity, Pseudoanonymity, and Limited Liability in Cyberspace. University of Chicago Legal Forum.
- ^ Rao, J.R., and P. Rohatgi (2000). "Can Pseudonyms Really Guarantee Privacy?" Proceedings of the 9th USENIX Security Symposium (Denver, Colorado, Aug. 14-17, 2000).
