Hey Craig, We're hoping to get the stop-gap in place within the week. Longer term... it's difficult to say. It's deep enough that we're not entirely sure we can 'fix' the extension but will look into that in addition to other options and other tools.
James Alexander Manager Trust & Safety Wikimedia Foundation (415) 839-6885 x6716 @jamesofur On Mon, Sep 28, 2015 at 4:52 PM, Craig Franklin < [email protected]> wrote: > Hi Floor, > > Is there any ETA on when we can expect this remedial work to be completed? > > Regards, > Craig Franklin > > 2015-09-29 8:09 GMT+10:00 Floor Koudijs <[email protected]>: > >> Dear Filip, >> >> I am so very sorry to hear about these frustrations with the deployment >> of the Education Extension. The problem is that there have been recent >> security issues with the extension. Engineering and our Trust & Safety >> department are working on some stop gaps to allow the extension to remain >> in place (and likely be deployed) while we determine what to do with the >> recent security issues. >> >> Please rest assured that we are working hard both on keeping the >> Education Extension going, and on thinking about a better tool to replace >> it for the future. >> >> Feel free to follow up if you have any further questions. I've cc-ed >> James Alexander here. >> >> Best, >> >> >> Floor Koudijs >> >> Senior Manager, Wikipedia Education Program >> >> Wikimedia Foundation >> >> +1.415.839.6885 x6806 (landline) >> >> +1.415.692.5289 (cell phone) >> >> [email protected] >> >> education.wikimedia.org >> >> On Mon, Sep 28, 2015 at 11:14 AM, Filip Maljkovic <[email protected]> >> wrote: >> >>> Hello everyone, >>> >>> Recently, a security issue has been found with Education extension. As a >>> result, new requests for installing the extension on Wikimedia wikis are >>> being "stalled", i.e. blocked for an indeterminate period. Can someone from >>> the Foundation comment on this? I don't see why we shouldn't install the >>> extension to more wikis, if the current installations are still working >>> as-is (i.e. they're not being uninstalled because of the security issue, as >>> far as I know). >>> >>> While it might be a long shot, is it possible to influence this decision >>> somehow? >>> >>> I feel thoroughly disappointed, having held community discussion and >>> vote, and then waiting for a month (!) for no apparent reason, just to be >>> outright told that it's unlikely to happen anytime soon. [1] >>> >>> [1] https://phabricator.wikimedia.org/T110619 >>> >>> Cheers, >>> Filip Maljković >>> Wikimedia Serbia >>> >>> _______________________________________________ >>> Education mailing list >>> [email protected] >>> https://lists.wikimedia.org/mailman/listinfo/education >>> >> >> >> _______________________________________________ >> Education mailing list >> [email protected] >> https://lists.wikimedia.org/mailman/listinfo/education >> >> >
_______________________________________________ Education mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/education
