Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On 3/20/2020 7:00 PM, Chris Angelico wrote: > On Sat, Mar 21, 2020 at 4:58 AM M.-A. Lemburg wrote: >> >> Fixed and added a note to not add empty list entries to the list. >> >> Pages are no longer world editable. >> > > Thank you! Very very much appreciate the work you do to keep the wiki > going. It has a good few oddities to it and folks like me have no idea > what's going on sometimes, so it's awesome that you're able to find > and fix problems so promptly. > > *holds up "YOU ROCK" sign* Thanks, Chris ! Kudos to you as well for being such a great gatekeeper for the wiki. -- Marc-Andre Lemburg Python Software Foundation http://www.python.org/psf/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On Sat, Mar 21, 2020 at 4:58 AM M.-A. Lemburg wrote: > > Fixed and added a note to not add empty list entries to the list. > > Pages are no longer world editable. > Thank you! Very very much appreciate the work you do to keep the wiki going. It has a good few oddities to it and folks like me have no idea what's going on sometimes, so it's awesome that you're able to find and fix problems so promptly. *holds up "YOU ROCK" sign* ChrisA ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On 3/20/2020 6:54 PM, M.-A. Lemburg wrote: > There are no changes on the server, but I see this in the EditorsGroup: > > > Looks like the empty entry give anonymous users access to EditorsGroup > rights. > > I'll remove the entry again. > Fixed and added a note to not add empty list entries to the list. Pages are no longer world editable. -- Marc-Andre Lemburg Python Software Foundation http://www.python.org/psf/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
There are no changes on the server, but I see this in the EditorsGroup: Looks like the empty entry give anonymous users access to EditorsGroup rights. I'll remove the entry again. On 3/20/2020 6:45 PM, M.-A. Lemburg wrote: > > On 3/20/2020 6:41 PM, M.-A. Lemburg wrote: >> >> On 3/20/2020 6:35 PM, Mats Wichmann wrote: >>> On 3/20/20 11:17 AM, Skip Montanaro wrote: I no longer have access to my old wiki.python.org account but got a bounce message (via postmaster) today which related to an attachment added to the BeginnersGuide page: https://wiki.python.org/moin/BeginnersGuide The page history shows a deletion and addition of the attachment in quick succession. I don't know if the old one was bogus, but the new one certainly seems to be. It's a JPEG with a .pdf extension. Someone probably should check it out and perhaps restore the old attachment or remove it altogether. Skip >>> something's going on - these edits are credited to "111" which is not an >>> editor in the editors list. >>> >>> yesterday I got notification of another change made by "48" (actually >>> these numbers were part of IP addresses, why aren't they coming in under >>> a username) - that one left the page in a conflicted state. >>> >>> It looks like someone might be trying out a breakin? >> When hovering over "111" in the info page you get this information: >> >> This suggests that someone without login (but the given IP address) is >> accessing the page. The IP address maps to Beijing, China. > It seems that all pages are editable without login... just tried a > few. > > This is bad. Perhaps someone changed the server configuration. > -- Marc-Andre Lemburg Python Software Foundation http://www.python.org/psf/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On 3/20/20 11:41 AM, M.-A. Lemburg wrote: >> It looks like someone might be trying out a breakin? > When hovering over "111" in the info page you get this information: > > This suggests that someone without login (but the given IP address) is > accessing the page. The IP address maps to Beijing, China. this was the other page: https://wiki.python.org/moin/BeginnersGuide/Programmers/SimpleExamples?action=info ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On 3/20/2020 6:41 PM, M.-A. Lemburg wrote: > > > On 3/20/2020 6:35 PM, Mats Wichmann wrote: >> On 3/20/20 11:17 AM, Skip Montanaro wrote: >>> I no longer have access to my old wiki.python.org account but got a >>> bounce message (via postmaster) today which related to an attachment >>> added to the BeginnersGuide page: >>> >>> https://wiki.python.org/moin/BeginnersGuide >>> >>> The page history shows a deletion and addition of the attachment in >>> quick succession. I don't know if the old one was bogus, but the new >>> one certainly seems to be. It's a JPEG with a .pdf extension. Someone >>> probably should check it out and perhaps restore the old attachment or >>> remove it altogether. >>> >>> Skip >> something's going on - these edits are credited to "111" which is not an >> editor in the editors list. >> >> yesterday I got notification of another change made by "48" (actually >> these numbers were part of IP addresses, why aren't they coming in under >> a username) - that one left the page in a conflicted state. >> >> It looks like someone might be trying out a breakin? > When hovering over "111" in the info page you get this information: > > This suggests that someone without login (but the given IP address) is > accessing the page. The IP address maps to Beijing, China. It seems that all pages are editable without login... just tried a few. This is bad. Perhaps someone changed the server configuration. -- Marc-Andre Lemburg Python Software Foundation http://www.python.org/psf/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On 3/20/2020 6:35 PM, Mats Wichmann wrote: > On 3/20/20 11:17 AM, Skip Montanaro wrote: >> I no longer have access to my old wiki.python.org account but got a >> bounce message (via postmaster) today which related to an attachment >> added to the BeginnersGuide page: >> >> https://wiki.python.org/moin/BeginnersGuide >> >> The page history shows a deletion and addition of the attachment in >> quick succession. I don't know if the old one was bogus, but the new >> one certainly seems to be. It's a JPEG with a .pdf extension. Someone >> probably should check it out and perhaps restore the old attachment or >> remove it altogether. >> >> Skip > something's going on - these edits are credited to "111" which is not an > editor in the editors list. > > yesterday I got notification of another change made by "48" (actually > these numbers were part of IP addresses, why aren't they coming in under > a username) - that one left the page in a conflicted state. > > It looks like someone might be trying out a breakin? When hovering over "111" in the info page you get this information: This suggests that someone without login (but the given IP address) is accessing the page. The IP address maps to Beijing, China. Thanks, -- Marc-Andre Lemburg Python Software Foundation http://www.python.org/psf/ http://www.malemburg.com/ ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
Re: [pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
On 3/20/20 11:17 AM, Skip Montanaro wrote: > I no longer have access to my old wiki.python.org account but got a > bounce message (via postmaster) today which related to an attachment > added to the BeginnersGuide page: > > https://wiki.python.org/moin/BeginnersGuide > > The page history shows a deletion and addition of the attachment in > quick succession. I don't know if the old one was bogus, but the new > one certainly seems to be. It's a JPEG with a .pdf extension. Someone > probably should check it out and perhaps restore the old attachment or > remove it altogether. > > Skip something's going on - these edits are credited to "111" which is not an editor in the editors list. yesterday I got notification of another change made by "48" (actually these numbers were part of IP addresses, why aren't they coming in under a username) - that one left the page in a conflicted state. It looks like someone might be trying out a breakin? ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
[pydotorg-www] Bogus wiki.python.org attachment on BeginnersGuide
I no longer have access to my old wiki.python.org account but got a bounce message (via postmaster) today which related to an attachment added to the BeginnersGuide page: https://wiki.python.org/moin/BeginnersGuide The page history shows a deletion and addition of the attachment in quick succession. I don't know if the old one was bogus, but the new one certainly seems to be. It's a JPEG with a .pdf extension. Someone probably should check it out and perhaps restore the old attachment or remove it altogether. Skip ___ pydotorg-www mailing list pydotorg-www@python.org https://mail.python.org/mailman/listinfo/pydotorg-www
