Wikipedia:Wikipedia Signpost/2025-04-09/News and notes

{{Wikipedia:Wikipedia Signpost/Templates/RSS description|1=35,000 user accounts compromised, locked in attempted credential-stuffing attack: Plus: 30-year anniversary of wiki software commemorated.}}{{Wikipedia:Signpost/Template:Signpost-header|||}}

{{Wikipedia:Wikipedia Signpost/Templates/Signpost-article-header-v2

|{{{1|35,000 user accounts compromised, locked in attempted credential-stuffing attack}}}|By Bri, Andreas Kolbe, Soni and Oltrepier

|piccyfilename = File:A screenshot of the English Wikipedia login form.png

|piccy-credits =

|piccy-license =

|piccy-xoffset =

|piccy-yoffset =

|piccy-scaling = 300

}}

{{Wikipedia:Wikipedia Signpost/Templates/Signpost-block-start-v2|fullwidth=no}}

= Over 35,000 accounts compromised and locked =

{{Wikipedia:Wikipedia Signpost/Templates/Filler image-v2

|size = 200px

|fullwidth = no

|alt = screenshot of Wikipedia login form

|caption = Credential stuffing attacks do not attempt to use brute force or guess any passwords – the attacker simply automates the logins for a large number (thousands to millions) of previously discovered credential pairs.

|image = File:A screenshot of the English Wikipedia login form.png

}}

{{Wikipedia:Wikipedia Signpost/Templates/Filler image-v2

|size = 200px

|fullwidth = no

|alt = screenshot of Meta-Wiki log of user:WMFOffice actions. 50 actions are listed, all about blocking accounts.

|caption = The public logs of :meta:Special:Log/WMFOffice show the Wikimedia Foundation blocking many user accounts quickly on 27 March 2025.

|image = File:Meta-Wiki - Main public logs - 27 March 2025 mass block for compromised Wikimedia accounts.png

}}

The Foundation announced that it has locked 35,893 accounts that were found to be compromised after a credential stuffing attack. Apparently, no accounts that utilized two-factor authentication were affected.

WMF representatives stated on the Meta page for the announcement that:

{{signpost inline quote|We don't currently have any reason to believe Wikimedia's systems were the source of the compromise, nor do we have any evidence that any particular user or group of users, or any specific community were targeted.}}

A discussion on English Wikipedia ensued over at the Village Pump. Off-wiki discussions of the matter happened on the Discord, which anyone using the platform is welcome to join through: https://discord.com/invite/wikipedia .– {{small|B}}

= WikiWikiWeb founder interviewed in the wake of the platform's 30th anniversary =

On March 25, 1995, American programmer Ward Cunningham officially launched WikiWikiWeb, the first wiki (user-editable website) in history, to accompany the Portland Pattern Repository website discussing software design patterns.

Despite being in read-only mode [https://web.archive.org/web/20150203073828/http://forage.ward.fed.wiki.org/view/migrating-wiki since February 2015], WikiWikiWeb celebrated its 30th birthday on March 25, 2025. The anniversary gained some media coverage, including from Italian newspaper Corriere della Sera {{Small|([https://www.corriere.it/tecnologia/25_marzo_15/trent-anni-fa-nasceva-la-prima-wiki-il-progetto-poi-diventato-wikipedia-che-ha-reso-democratica-la-conoscenza-d9b4a01b-f5fa-4f5a-9be4-36fec8906xlk.shtml in Italian], behind pay-wall)}}; plus, Cunningham himself has been [https://www.elmundo.es/la-lectura/2025/04/03/67e52124fdddff3f278b457e.html interviewed] by Spanish newspaper El Mundo, as well as MediaWiki developer Yaron Koren – as part of [https://betweenthebrackets.libsyn.com/episode-179-ward-cunningham an episode of his Between the Brackets podcast]. – {{small|O}}

= News from WMF =

The programming proposal application phase for Wikimania 2025 has officially closed; the convention's organizers will now review the submitted programs, before starting announcements in May. Set to be hosted in Nairobi, Kenya, from August 5 to 9, 2025, Wikimania 2025 is tied to the theme "Inclusivity. Impact. Sustainability", with the organizing team writing:

{{Wikipedia:Wikipedia Signpost/Templates/block quote

| text = The theme [...] highlights our vision for a Wikimedia movement that is accessible to all, fosters collaboration across diverse communities, and prioritizes long-term viability. As we celebrate our 20th anniversary, this theme underscores our commitment to addressing global challenges, promoting inclusivity, and ensuring the sustainability of free knowledge for generations to come.

| by =

| source =

| ts =

| oldid =

}}

As part of this year's fifth bulletin, it was announced that a new Wikimedia Research Fund is launching: researchers aiming to advance free knowledge through Wikimedia projects can submit their proposals until April 16, with application notifications being set to be issued on May 14. Updates about [https://diff.wikimedia.org/2025/03/14/wikimedia-design-jam-introduces-codex-to-designers/ Wikimedia’s Codex design system], an [https://test.wikipedia.org/w/index.php?title=Special%3AContentTranslation&filter-type=automatic&filter-id=previous-edits&active-list=suggestions&from=en&to=es&wprov=wppw2 improved and up-coming Content Translation tool dashboard] for all Wikipedias, a [https://commons.wikimedia.org/wiki/Commons:WMF_support_for_Commons/Upload_Wizard_Improvements#Improve_category_selection new system to select the appropriate file categories], and the latest objectives and key results of the Product & Technology department have all been highlighted, as well.

At a call for volunteers for the Global Resource Distribution Committee (see prior Signpost coverage), a deadline for self-nomination was extended to March 31, and several individuals withdrew their offers to participate. – {{Small|S, O, and B}}

=Brief notes=

  • New administrators: The Signpost welcomes the English Wikipedia's newest administrator, {{U|Goldsztajn}}.
  • Active administrators: The number of active administrators is a bit wobbly and hit 447 on 28 March – taking us back to where we were almost exactly a year ago, despite the gains in November 2024 due to administrator elections (see prior Signpost coverage). It fell again to 443 on 7 April 2025, just as we go to press.
  • A new admin recall petition passes: The 3rd ever admin recall petition passed earlier last month, gaining the required 25 signatures in under 5 hours. After the petition passed, {{U|Master Jay}} chose to resign at the bureaucrats' noticeboard.
  • Articles for Improvement: This week's Article for Improvement is Plate (dishware) (beginning 7 April 2025), followed by Honshu (beginning 14 April 2025). Please be bold in helping improve these articles!

{{Wikipedia:Wikipedia Signpost/Templates/Signpost-block-end-v2}}

{{Wikipedia:Wikipedia Signpost/Templates/Signpost-article-end-v2}}

{{Wikipedia:Signpost/Template:Signpost-article-comments-end||2025-03-22|2025-05-01}}