Related: Allow moderators to hide a revision
Current situation: after the
revision-hiding silent-revision feature has been implemented, it takes two moderators to soft-hide a revision in silently redact a post.
It is a very welcome idea for cases of sensitive details being posted, although we must understand it will not deter organized hacker teams who can set up scraping bots and botnets, just ordinary rogue visitors (time necessary for a human mod's intervention is always greater than time interval between revisits of a sufficiently large botnet scraper).
However, for transparency and to prevent abuse of this feature, the general public may need an indicator in a post's timeline showing when the revision was hidden. I know it is a tricky proposition, thus I'd welcome the community's input on whether this feature is indeed desirable.
Hiding sensitive details is a normal use case. Yet this feature may be abused - e.g. when two mods collude to cover up something in the revision history, something that may be likely to influence the community's stance on e.g. an ongoing or looming election. (thanks to @hichris123 for insisting on further explanation).
As an alternative, a moderator's user profile page may include the number of revisions
hidden silently redacted (a simple number for us mere mortals, yet a hyperlink to the list of revisions for other mods and for Community Managers).
Rationale: if crawler bots have indexed the revision or someone visited it (and e.g. taken a screenshot), the damage is already done. The person who posted sensitive data (like access credentials) would be advised to change the password ASAP. Having some indication of revision hiding that can be explained by the moderators is essential for the community's trust in them and the system in general.
Hat tip: @rene
An ancillary note: it would relieve some manual stress on the mods if the UI for a silent revision included a checked (by default) checkbox triggering a canned private e-mail/ping to the original poster/editor. In the normal use case (i.e. for security reasons) this ping would advise the OP to change all the passwords ASAP.
Some logging should definitely be done for the benefit of CMs, including the original text. - Already implemented as per Shog9's revision.