<?xml version="1.0" encoding="UTF-8" ?>
<rss version="2.0" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:wikidot="http://www.wikidot.com/rss-namespace">

	<channel>
		<title>9Kcon security discussion</title>
		<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion</link>
		<description>Posts in the discussion thread &quot;9Kcon security discussion&quot;</description>
				<copyright></copyright>
		<lastBuildDate>Tue, 15 Sep 2026 05:59:50 +0000</lastBuildDate>
		
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7097533</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7097533</link>
				<description></description>
				<pubDate>Tue, 05 Aug 2025 03:14:50 +0000</pubDate>
				<wikidot:authorName>Kufat</wikidot:authorName>				<wikidot:authorUserId>2336666</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I agree with syuzhet as to the contradictory assumptions here with respect to malicious voters. Any malicious actors with a decent knowledge of Wikidot will know how to get around all of the measures mentioned here before 9kcon starts. Moreover, a <em>coordinated</em> malicious voting effort would only need one person to act as the 'brains' while others act as the 'brawn.'</p> <p>I think that we can use technological measures to minimize bandwagoning by benignly-intentioned users, but Wikidot doesn't give us the tools that we need to prevent malicious voting. The best we could do would be to respond to it as it happens, unfortunately.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7096154</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7096154</link>
				<description></description>
				<pubDate>Sun, 03 Aug 2025 18:59:02 +0000</pubDate>
				<wikidot:authorName>Ethagon</wikidot:authorName>				<wikidot:authorUserId>5844683</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I agree that acting for higher turnaround in removing malicious votes that is communicated during the contest and more manpower by acting with Disc directly is probably the best solution here.</p> <p>Otherwise I can support all measures outside of the first one, as it hasn't been tested in another contest before. I do not think they're intrusive enough to cause issue to the userbase, but may help in at least banning some of the malicious votes that occur directly through swapping votes as one entry approaches another on the leaderboard. (I will admit though that I haven't interacted much with the leaderboard part of contests myself).</p> <p>I do think #1 is an idea worth trying for another contest, just a smaller-scale one first.</p> <p>I can support both discoverability aid options, but for the second one I have slight worries of clashing with personalized CSS. I think ideally the listpage in this case should have a similar visual style to the wiki-walk footer which all SCP articles are already required to include at some point.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7094267</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7094267</link>
				<description></description>
				<pubDate>Sat, 02 Aug 2025 07:23:16 +0000</pubDate>
				<wikidot:authorName>syuzhet</wikidot:authorName>				<wikidot:authorUserId>7988708</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>Hi.</p> <p>I only suggested the Disciplinary Team because they seem to be a group of people already willing to sort through large amounts of data. It also makes sense because it's already their job to hear malicious voting cases, so there's no reason for them to stand by especially during the big SCP event of the season.</p> <p>The issue with adding more members to the Contest Team is that it necessarily requires the person joining to be banned from participating in contests for all eternity. Not many users are willing to join the team knowing that they will be cursed in this way, so it is difficult to recruit any members at all&#8230;</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7093848</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7093848</link>
				<description></description>
				<pubDate>Sat, 02 Aug 2025 01:00:50 +0000</pubDate>
				<wikidot:authorName>fairydoctor</wikidot:authorName>				<wikidot:authorUserId>5878032</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I agree with Guaire that sign-ups should be closed, at either the start of the writing period or when the posting period starts. I don't fully know the reasoning behind <em>not</em> closing registration, but if the worry is site growth, we are not a start-up (or tech company) and shouldn't be focused/worried about growth.</p> <p>I'm internally still debating on not showing rating; however, I'm leaning toward not showing the rating but I'm in favour of keeping the leaderboard and ranking. Overall, I agree with Ariadne that 'no rating' should be tested on the next contest. Doing an untested measure in a contest as big as an XKcon feels like a massive gamble to implement.</p> <p>For Crom, we shouldn't touch this at all since it's another users bot that they manage (and pay for) in their spare time. This feels like it would be an incredible amount of work for them, and quite frankly an unfair demand from staff. (I'm aware that Crom would still show the rating, this feels like a decent middle ground for the proposed obfuscation of rating <em>on the article itself</em>.)</p> <p>In as far as the contest team, forcing Disciplinary to be apart of the contest team during a XKcon feels like it would put an unnecessary amount of stress on an already stressed team. For the contest team, only three staff seems like a woeful amount of people to mediate contests, especially contests that have well over 100 articles submitted.</p> <p>I suggest adding more (willing!) trusted staff to the contest team to help alleviate the work load.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7093704</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7093704</link>
				<description></description>
				<pubDate>Fri, 01 Aug 2025 20:07:49 +0000</pubDate>
				<wikidot:authorName>syuzhet</wikidot:authorName>				<wikidot:authorUserId>7988708</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>Hi.</p> <p>I'm rescinding my support for this entire proposal.</p> <p>After speaking with psychicProgrammer on Discord, these measures seem to have been made while presupposing that:</p> <ol> <li>the malicious voters are determined enough to make many alt accounts</li> <li>the malicious voters do not know what CSS is or how to use the Inspect Element tool.</li> <li>the malicious voters are not determined enough to learn how to circumvent these things, a hefty endeavor that requires five minutes of a person's time.</li> </ol> <p>I don't believe this is a realistic profile of the hypothetical malicious voter, and so, I don't believe this proposal will be effective in any way. And given the concerns raised by other people, I cannot support something that harms the experience of the common folk without providing any tangible benefits in return.</p> <p>As for my own analysis of the situation, I believe that the root cause of the problem is a shortage of manpower. This is because only three people &#8212; psychicProgrammer, Naepic, and Whiteguard &#8212; were involved in the process of sorting out malicious votes during the SCP-8000 contest. Because of the work-load they had to endure, these members of the Contest Team received grievous injuries and almost died. Well, I have a solution&#8230;</p> <p>I recommend impressing the entirety of the Disciplinary Team into an Anti-Brigading Contest Task Force that will work closely with the Contest Team to rapidly identify, apprehend, and eliminate all malicious voters during the contest. This will remove weight from the shoulders of the Contest Team and put these matters to a swift end. The Disciplinary Team has also very recently demonstrated their ability to expedite malicious voting cases, so this seems to be the most clear and obvious solution to the problem&#8230;</p> <p>Well, this is just my opinion, but please let me know what you think&#8230;</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7092303</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7092303</link>
				<description></description>
				<pubDate>Thu, 31 Jul 2025 18:23:45 +0000</pubDate>
				<wikidot:authorName>PlaguePJP</wikidot:authorName>				<wikidot:authorUserId>5813664</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>After engaging with the user base in 19cord, it's clear that leaderboards and rankings are viewed positively and seen as a fun part of the contest. I edited my first post to remove my support of that proposal, but I think I should be clear in that my opinion's changed and I'm against it.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7091203</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7091203</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 23:53:56 +0000</pubDate>
				<wikidot:authorName>OriTiefling</wikidot:authorName>				<wikidot:authorUserId>7454631</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I don't think any of this meaningfully addresses the concerns of potential vote brigading, and I can't really support any of these things without them being tested during a smaller con first. A kcon is NOT the place to test out stuff like this.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7091165</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7091165</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 22:26:34 +0000</pubDate>
				<wikidot:authorName>AriadnesThread</wikidot:authorName>				<wikidot:authorUserId>8157639</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I think at this point, it is clear that the visible votes change (which I recognize was not done with this intention at all!) would cause more stress and problems than solutions for the userbase as a whole, and ultimately the time to test out this method is absolutely not a kcon. Speaking only as a sort of custodian of the spaces that people discuss their works, the stress that is already so intense for competitors would be compounded by that level of uncertainty as well as the likely underground methods to try and get around the opacity causing another wrinkle that would ultimately end up in disciplinary action. I understand fully the reasoning for the proposal, but I simply can't endorse it either as staff or a writer.</p> <p>I do agree with Dagon though that a 'hide-a-vote' contest would be really interesting as a stand alone! I think doing that as a contest next year as a much better idea, to get an idea of the challenges of running something like that in a far less high-stakes environment. Much like Classic-con, I really do think we might see some real upticks in posting, as well as a sort of excitement we're not used to that could energize the writing base. Just again, not as a kcon.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090981</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090981</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 16:25:02 +0000</pubDate>
				<wikidot:authorName>Pedagon</wikidot:authorName>				<wikidot:authorUserId>5903100</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>Just porting what I said in staffchat here:<br /> Personally I think this is fun for the sake of being fun and is, as a result, worth trying in some way. I personally do think hiding the scores from everyone is fun and I’d like to see it even if just to add a bit of gimmick to the kcons since we have been doing more gimmicks like this recently and I think kcons are a good place for this specific one. I do, however, think rhe ban on listpages on authorpages I think is dumb because knowing the winners is part of the community hyping up each other. Like, there is a whole vibe to people being like “this one is so underrated” that you don’t get it you have no way at all to know how rated it even is. Knowing where everyone is currently placing is part of the excitement and fun of kcons. For non-authors/readers, it’s a huge community thing to hype up the underdogs, cheer for articles you consider underrated, and hope your favourite places well. All of which can be retained via keeping leaderboards without displaying vote counts. In my experience, the vote manipulation comes in when articles are close and people want to edge theirs over just a little bit so they get all their friends to bump. But if you just don’t know by how much an article is winning/losing by, you either don’t even bother or you go so over the top that the manipulation is obvious. Plus, if the issue is just that people think it gives a boost to whoever is the one who adds the list to their author page first then the solution is to have us put the list on the contest page ourselves rather than adding more rules for users to keep up with</p> <p>Plus, people will complain and break down whether they can or cannot see votes. So I personally think hiding the vote numbers is fun and worth giving a shot. Ideally it should have been done on a previous, lower stakes contest, but thats not how time works</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090979</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090979</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 16:22:55 +0000</pubDate>
				<wikidot:authorName>psychicprogrammer</wikidot:authorName>				<wikidot:authorUserId>5299606</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>We keep 5 while dropping hiding the votecount by keeping the category (which can include the nav thing we want to add).</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090887</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090887</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 15:35:24 +0000</pubDate>
				<wikidot:authorName>Uncle Nicolini</wikidot:authorName>				<wikidot:authorUserId>3487700</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>for those saying &quot;no to 1&quot; you are also saying &quot;no to 5&quot; by extension unless we go out of our way to inconvenience fiftynine, creator of scpper, which i do not think we should do. it is a free service that is run at a loss to them, and the last thing i feel we should do is bother them to change something for our sake.</p> <p>as for my thoughts on 1, i dont think it would be good for the collective mental health of the site to have the rating of your article effectively be in limbo for a month and a half. without naming names, two users who were in the top running of the contest were effectively breaking down daily because of the uncertainty caused by the brigades, closeness of votes, and incoming adjustments. now imagine everyone thinking they are both winning and losing simultaneously, collectively, on a mass scale. this is a recipe for disaster.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090816</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090816</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 14:36:25 +0000</pubDate>
				<wikidot:authorName>sailorenoch</wikidot:authorName>				<wikidot:authorUserId>5553461</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>In favor of everything except 1 and 4, as I believe those would make the contest alot less fun for everyone involved. I'm also unsure if these would solve any issues and may just demotivate participation/audience excitement.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090776</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090776</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 13:56:49 +0000</pubDate>
				<wikidot:authorName>Guaire</wikidot:authorName>				<wikidot:authorUserId>5643605</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>If 1# had been tested before i would consider it, but as of rn i share the same concerns as plague.</p> <p>The other points i agree.</p> <p>But as was discussed in previous threads, one of the most sure ways to prevent another 8kcon incident is to close applications for the duration of the kcon, wether you like that or not.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090642</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090642</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 13:11:03 +0000</pubDate>
				<wikidot:authorName>DrBleep</wikidot:authorName>				<wikidot:authorUserId>2887044</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>In favor of everything but #1.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090622</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090622</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 12:53:15 +0000</pubDate>
				<wikidot:authorName>Yossipossi</wikidot:authorName>				<wikidot:authorUserId>2199269</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I am against proposal 1, but I am in favor of the rest.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090565</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090565</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 12:10:08 +0000</pubDate>
				<wikidot:authorName>DianaBerry</wikidot:authorName>				<wikidot:authorUserId>3444428</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>I think hiding it from Cromm could possibly help. I agree with plauge that i don't think hiding the score would help.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090562</guid>
				<title>Re: 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090562</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 12:07:06 +0000</pubDate>
				<wikidot:authorName>PlaguePJP</wikidot:authorName>				<wikidot:authorUserId>5813664</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <blockquote> <p>1: All entries in 9Kcon will be under a special 9000: category with CSS to hide the score of articles</p> </blockquote> <p>I’m not at all a fan of this. This is a measure that doesn’t solve any issues and only serves to make more work for everyone involved in the contest.</p> <p>As a “victim” of the SCP-8000 contest controversy, I outright oppose this specific solution. If this were implemented for 8kcon, it likely would’ve made my experience worse. It’s incredibly important that there is some metric for authors to see how their articles are performing. It sets expectations, and will prevent people from getting extremely stressed out like I did.</p> <p>A lot of these solutions focus more on punitive measures rather than creating an environment where the authors feel supported, the readers can enjoy the content, and staff can mediate. Instead, this sets up a system where authors will be left unclear on their positions, leading to potential stress and confusion. Authors will find ways to view their scores, but if that’s found out, they’ll be punished.</p> <p>Expecting users to go a month to a month and a half without knowing where they rank is absolutely unacceptable.</p> <p>There’s also the possibility that, without being able to see upvotes as a vague metric of quality, offsite readers only read articles written by authors they know produce writing they enjoy. We saw with ClassicCon that the site can rally around two newer or lesser known authors and the vote count allows everyone a way to show support. Removing it removes an active socialization tool, and may push readers to stay confined in what they know rather than exploring the plethora of writing Kcons produce.</p> <p>I think pushing for less room for malicious actions is good, however, this is not the solution. It only obfuscates the issue and pretends is doesn’t exist, rather than tackling it as the source.</p> <p><span style="text-decoration: line-through;">I support the banning of leaderboards on author pages and the removal of the CROM list ranking.</span></p> <p>ETA: I don't think the removal of leaderboards, the removal of the CROM list, or banning the entries from the Top of the Month does anything to meaningfully solve the issue of malicious voting as well. After some thinking, I don't support any part of this proposal.</p> 
				 	]]>
				</content:encoded>							</item>
					<item>
				<guid>http://05command.wikidot.com/forum/t-17173539#post-7090548</guid>
				<title>[DISCUSSION] 9Kcon security discussion</title>
				<link>http://05command.wikidot.com/forum/t-17173539/9kcon-security-discussion#post-7090548</link>
				<description></description>
				<pubDate>Wed, 30 Jul 2025 11:58:43 +0000</pubDate>
				<wikidot:authorName>psychicprogrammer</wikidot:authorName>				<wikidot:authorUserId>5299606</wikidot:authorUserId>				<content:encoded>
					<![CDATA[
						 <p>04 mirror: <a href="https://scp-wiki.wikidot.com/forum/t-17173541/discussion-9kcon-security-discussion">https://scp-wiki.wikidot.com/forum/t-17173541/discussion-9kcon-security-discussion</a></p> <p>Historically we have had two Kcons where there was large scale vote manipulation, namely 8kcon and 6kcon. As far as we can tell these only happen in cases where there are two or more entries that are numerically close and tend to be driven by the semi onsite fanbase. As such we propose obfuscating voting as much as possible.</p> <p>Now our proposal for this is a multi step plan:</p> <p>1: All entries in 9Kcon will be under a special 9000: category with CSS to hide the score of articles<br /> 2: We remove 9000 entries from top rated by month and other top rated pages<br /> 3: The exception is lowest rated pages to allow for normal deletions, articles under -10 will be moved to the default category for vote inspection<br /> 4: A formal ban any use of listpages on author pages or work benches for identifying contest votes<br /> 5: Crom has been set such that any 9000 entry will not show its score and the 9000 tag has been blocked from list (SCPPER will not need any changes as it does not display non _default pages)</p> <p>This should solve the problem of malicious votes by denying the opportunity to identify close races.</p> <p>Additionally there are two other things we would like to add to aid in discoverability:</p> <p>1: Somewhere on the front page we have a link to a random SCP entry<br /> 2: At the end of each 9K entry we require a link to another random entry via listpages, we put this into a div to make it clear it is not part of entry.</p> <p>This discussion will go on for one week</p> <p><iframe src="https://scpwiki.github.io/timer/timer.html?lang=en&amp;time=2025-08-06T11%3A58%3A16.099Z" align="" frameborder="" height="" scrolling="" width="" class="" style="width: 750px; height: 200px; border: 0; text-align: center;"></iframe></p> 
				 	]]>
				</content:encoded>							</item>
				</channel>
</rss>