[Wikitech-l] A bug into pywikipedia: help needed

2012-12-21 Thread Alex Brollo
I found a bug into pywikipedia library, wikivoyage-family.py.

Into the first class, there's a wrong line that blocks login for bots.:

self.name=Wikivoyage

The right line should be:

self.name=wikivoyage

with lower case; fixing the script into my local copy of pywikipedia
library the bug disappears and login runs.

Can please one of you post a bug into Bugzilla (I can't... I hate Bugzilla
and I never use it :-(  )? In the meantime, I'll fix the bug manually at
any pywikipedia update.

Thanks!

Alex brollo
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] A bug into pywikipedia: help needed

2012-12-21 Thread Bináris
Neither wikitech-l, nor Bugzilla is the right place to complain about
Pywikipedia. :-) We have a separate mailing list called Pywikipedia-l (
https://lists.wikimedia.org/mailman/listinfo/pywikipedia-l) which is
recommended to join if you use Pywiki regularly, and a separate bug tracker
on SF: http://sourceforge.net/tracker/?group_id=93107atid=603138. Choose
one!
In Pywiki community you are allowed to hate Bugzilla, git and gerrit. :-)


2012/12/21 Alex Brollo alex.bro...@gmail.com

 I found a bug into pywikipedia library, wikivoyage-family.py.

 Into the first class, there's a wrong line that blocks login for bots.:

 self.name=Wikivoyage

 The right line should be:

 self.name=wikivoyage

 with lower case; fixing the script into my local copy of pywikipedia
 library the bug disappears and login runs.

 Can please one of you post a bug into Bugzilla (I can't... I hate Bugzilla
 and I never use it :-(  )? In the meantime, I'll fix the bug manually at
 any pywikipedia update.

 Thanks!

 Alex brollo
 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l




-- 
Bináris
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] A bug into pywikipedia: help needed

2012-12-21 Thread Alex Brollo
2012/12/21 Bináris wikipo...@gmail.com

 Neither wikitech-l, nor Bugzilla is the right place to complain about
 Pywikipedia. :-) We have a separate mailing list called Pywikipedia-l (
 https://lists.wikimedia.org/mailman/listinfo/pywikipedia-l) which is
 recommended to join if you use Pywiki regularly, and a separate bug tracker
 on SF: http://sourceforge.net/tracker/?group_id=93107atid=603138. Choose
 one!
 In Pywiki community you are allowed to hate Bugzilla, git and gerrit. :-)


OK! Thank you!

Alex
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


[Wikitech-l] Jenkins: whitespace test!

2012-12-21 Thread Antoine Musso
Hello,

For a long time now we have been reviewing changes that contains
unwanted trailing whitespaces. To make sure the patch submitter is
warned about it, I have enabled trailing whitespace check on
mediawiki/core.git

The bug report is:
 https://bugzilla.wikimedia.org/42628

I have only enabled such check on the mediawiki/core.git repository for
now.  If that went well I will look up at enabling it on other repos.

cheer,

-- 
Antoine hashar Musso


___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Jenkins: whitespace test!

2012-12-21 Thread Chad
On Fri, Dec 21, 2012 at 9:43 AM, Antoine Musso hashar+...@free.fr wrote:
 Hello,

 For a long time now we have been reviewing changes that contains
 unwanted trailing whitespaces. To make sure the patch submitter is
 warned about it, I have enabled trailing whitespace check on
 mediawiki/core.git

 The bug report is:
  https://bugzilla.wikimedia.org/42628

 I have only enabled such check on the mediawiki/core.git repository for
 now.  If that went well I will look up at enabling it on other repos.


Is this a warning, or a failure? I really don't think we should *fail*
patches for something that's almost always harmless. The only
reason I ask is because you say warning here but failure on the
bug.

-Chad

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Jenkins: whitespace test!

2012-12-21 Thread Luke Welling WMF
It should be an ignorable warning.

There are occasionally situations where trailing white space is necessary.
MySQL for instance can be funny about combining multi line strings into one
query, although I don't think it presents when called via PHP.

Luke


On Fri, Dec 21, 2012 at 9:59 AM, Chad innocentkil...@gmail.com wrote:

 On Fri, Dec 21, 2012 at 9:43 AM, Antoine Musso hashar+...@free.fr wrote:
  Hello,
 
  For a long time now we have been reviewing changes that contains
  unwanted trailing whitespaces. To make sure the patch submitter is
  warned about it, I have enabled trailing whitespace check on
  mediawiki/core.git
 
  The bug report is:
   https://bugzilla.wikimedia.org/42628
 
  I have only enabled such check on the mediawiki/core.git repository for
  now.  If that went well I will look up at enabling it on other repos.
 

 Is this a warning, or a failure? I really don't think we should *fail*
 patches for something that's almost always harmless. The only
 reason I ask is because you say warning here but failure on the
 bug.

 -Chad

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Jenkins: whitespace test!

2012-12-21 Thread Luke Welling WMF
And PS, as I've been dinged for this a few times this is now in my .vimrc
to highlight trailing whitespace in vim.

highlight ExtraWhitespace ctermbg=red guibg=red
match ExtraWhitespace /\s\+$/
autocmd BufWInEnter * match ExtraWhitespace /\s\+$/
autocmd InsertEnter * match ExtraWhitespace /\s\+\%#\@!$/
autocmd InsertLeave * match ExtraWhitespace /\s\+$/
autocmd BufWInLeave * call clearmatches()



On Fri, Dec 21, 2012 at 10:20 AM, Luke Welling WMF
lwell...@wikimedia.orgwrote:

 It should be an ignorable warning.

 There are occasionally situations where trailing white space is
 necessary.  MySQL for instance can be funny about combining multi line
 strings into one query, although I don't think it presents when called via
 PHP.

 Luke



 On Fri, Dec 21, 2012 at 9:59 AM, Chad innocentkil...@gmail.com wrote:

 On Fri, Dec 21, 2012 at 9:43 AM, Antoine Musso hashar+...@free.fr
 wrote:
  Hello,
 
  For a long time now we have been reviewing changes that contains
  unwanted trailing whitespaces. To make sure the patch submitter is
  warned about it, I have enabled trailing whitespace check on
  mediawiki/core.git
 
  The bug report is:
   https://bugzilla.wikimedia.org/42628
 
  I have only enabled such check on the mediawiki/core.git repository for
  now.  If that went well I will look up at enabling it on other repos.
 

 Is this a warning, or a failure? I really don't think we should *fail*
 patches for something that's almost always harmless. The only
 reason I ask is because you say warning here but failure on the
 bug.

 -Chad

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l



___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Secure Coding Documentation

2012-12-21 Thread Chris Steipp
Yep, I'll send out a link about 30 minutes before we start, and post it on
irc too. Hope you can join in!
On Dec 20, 2012 8:13 PM, Tyler Romeo tylerro...@gmail.com wrote:

 I might join in. I'm guessing the Hangout link will be sent via the mailing
 list?

 *--*
 *Tyler Romeo*
 Stevens Institute of Technology, Class of 2015
 Major in Computer Science
 www.whizkidztech.com | tylerro...@gmail.com


 On Thu, Dec 20, 2012 at 5:41 PM, Rob Moen rm...@wikimedia.org wrote:

  This is great Chris.  Airport wifi permitted, I will gladly tune in.
 
 
  On Wed, Dec 19, 2012 at 7:11 PM, Chris Steipp cste...@wikimedia.org
  wrote:
 
   Hi Everyone,
  
   I'd like to invite anyone interested to join in on a secure coding
   documentation sprint on Friday of this week (Dec 21st), from 11:30am -
   12:30pm PST (19:30-20:30 UTC). If you're interested in joining, but
   can't make that specific time, let me know and we may hold more of
   these if there's interest.
  
   The goal of this sprint is to both help anyone who is interested learn
   about some specific security vulnerabilities, and update our
   documentation so that new developers can avoid these issues in the
   future.
  
   On Friday, I would like to address a couple of topics where we have
   very little documentation:
   * DOM-based XSS, and writing secure client side code. Closely related
   is general security for gadget developers.
   * Protecting private information (i.e., when do developers need to
   check if data has been deleted / suppressed)
  
   We'll spend a little time talking about each subject (and some
   specific issues we've seen recently), and I'll have a rough article
   outline in an etherpad. Then I would like everyone's help fleshing out
   the documents so they are clear and informative for other developers
   of all skill levels.
  
   I'll have both a google hangout for video, and an audio line for
   anyone who prefers to avoid closed technology. If you want to dial in,
   please let me know so I can get you a phone number in advance.
  
   Chris
  
   ___
   Wikitech-l mailing list
   Wikitech-l@lists.wikimedia.org
   https://lists.wikimedia.org/mailman/listinfo/wikitech-l
  
 
 
 
  --
  Rob Moen
  Wikimedia Foundation
  rm...@wikimedia.org
  ___
  Wikitech-l mailing list
  Wikitech-l@lists.wikimedia.org
  https://lists.wikimedia.org/mailman/listinfo/wikitech-l
 
 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Jenkins: whitespace test!

2012-12-21 Thread Antoine Musso
Le 21/12/12 15:59, Chad a écrit :
 Is this a warning, or a failure? I really don't think we should *fail*
 patches for something that's almost always harmless. The only
 reason I ask is because you say warning here but failure on the
 bug.

Ah true. Hmm I will back it off so and probably going to make the
whitelist check an independant job that would not vote on failure. That
would be for next year :)

-- 
Antoine hashar Musso


___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] ganglia temporarily private

2012-12-21 Thread Chris Steipp
Hey Peter,

I just checked again, and the xss'es are still there on
ganglia.wikimedia.org... so I think we'll probably need to write the
patches. I'll see if I can get those done this afternoon.



On Tue, Dec 18, 2012 at 3:52 PM, Peter Youngmeister p...@wikimedia.org wrote:
 Hi All,

 Due to some security concerns, ganglia.w.o is currently behind htaccess.
 We're actively working to resolve the security issues, and will restore
 public access once they are resolved.

 Sorry for the inconvenience!

 Cheers,
 Peter
 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Follow / like MediaWiki @ social media

2012-12-21 Thread Quim Gil

On 12/20/2012 05:14 PM, Matthew Flaschen wrote:

On 12/19/2012 06:43 PM, Quim Gil wrote:

It's not completely sorted out but there has been a big progress in just
a couple of days:

https://www.mediawiki.org/wiki/Social_media

Summary: follow  like MediaWiki in your social networks to read 
promote MediaWiki  Wikimedia tech news.

* http://identi.ca/mediawiki
* https://twitter.com/MediaWiki
* https://www.facebook.com/MediaWikiProject

These channels pay a lot of attention to critical mass. The more
followers and shares/likes the more promoted you get (more or less).
Your support is welcome.


You should also consider making http://app.net/mediawiki .  app.net is
an ad-free subscription social network, and it's currently very popular
with us techies (but broadening its base).


Thank you for the suggestion. Do you (or someone you know) want to 
maintain that? We can talk.


I'm posting relevant news to identi.ca, Twitter, Facebook and Google+. 
Currently I feel only Twitter  Facebook pays off (looking at the 
outcome and forgetting about other reasonings). Still, I'm happy working 
with these 4 - even more happy if someone would want to step in and help.


No plans to take a 5th so far, unless there is a way to automate the 
process and someone willing to pay attention to potential feedback in 
that new channel.


--
Quim Gil
Technical Contributor Coordinator @ Wikimedia Foundation
http://www.mediawiki.org/wiki/User:Qgil

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Follow / like MediaWiki @ social media

2012-12-21 Thread Chad
On Thu, Dec 20, 2012 at 8:14 PM, Matthew Flaschen
mflasc...@wikimedia.org wrote:
 On 12/19/2012 06:43 PM, Quim Gil wrote:
 It's not completely sorted out but there has been a big progress in just
 a couple of days:

 https://www.mediawiki.org/wiki/Social_media

 Summary: follow  like MediaWiki in your social networks to read 
 promote MediaWiki  Wikimedia tech news.

 * http://identi.ca/mediawiki
 * https://twitter.com/MediaWiki
 * https://www.facebook.com/MediaWikiProject

 These channels pay a lot of attention to critical mass. The more
 followers and shares/likes the more promoted you get (more or less).
 Your support is welcome.

 You should also consider making http://app.net/mediawiki .  app.net is
 an ad-free subscription social network, and it's currently very popular
 with us techies (but broadening its base).


Fwiw, I've never even heard of this until now.

-Chad

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] ganglia temporarily private

2012-12-21 Thread Chris Steipp
And of course, that was meant to go to Peter only. Thank you reply-to :)

We'll try and get ganglia back up for you all soon!

On Fri, Dec 21, 2012 at 9:57 AM, Chris Steipp cste...@wikimedia.org wrote:
 Hey Peter,

 I just checked again, and the xss'es are still there on
 ganglia.wikimedia.org... so I think we'll probably need to write the
 patches. I'll see if I can get those done this afternoon.



 On Tue, Dec 18, 2012 at 3:52 PM, Peter Youngmeister p...@wikimedia.org 
 wrote:
 Hi All,

 Due to some security concerns, ganglia.w.o is currently behind htaccess.
 We're actively working to resolve the security issues, and will restore
 public access once they are resolved.

 Sorry for the inconvenience!

 Cheers,
 Peter
 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] ganglia temporarily private

2012-12-21 Thread Daniel Zahn
re-enabled the password protection on ganglia per request

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Secure Coding Documentation

2012-12-21 Thread Krenair

It's 19:23 now so this starts in under 10 minutes. Can I have the link please?

Alex

On 21/12/12 15:53, Chris Steipp wrote:


Yep, I'll send out a link about 30 minutes before we start, and post it on
irc too. Hope you can join in!
On Dec 20, 2012 8:13 PM, Tyler Romeo tylerro...@gmail.com wrote:


I might join in. I'm guessing the Hangout link will be sent via the mailing
list?

*--*
*Tyler Romeo*
Stevens Institute of Technology, Class of 2015
Major in Computer Science
www.whizkidztech.com | tylerro...@gmail.com


On Thu, Dec 20, 2012 at 5:41 PM, Rob Moen rm...@wikimedia.org wrote:


This is great Chris.  Airport wifi permitted, I will gladly tune in.


On Wed, Dec 19, 2012 at 7:11 PM, Chris Steipp cste...@wikimedia.org
wrote:


Hi Everyone,

I'd like to invite anyone interested to join in on a secure coding
documentation sprint on Friday of this week (Dec 21st), from 11:30am -
12:30pm PST (19:30-20:30 UTC). If you're interested in joining, but
can't make that specific time, let me know and we may hold more of
these if there's interest.

The goal of this sprint is to both help anyone who is interested learn
about some specific security vulnerabilities, and update our
documentation so that new developers can avoid these issues in the
future.

On Friday, I would like to address a couple of topics where we have
very little documentation:
* DOM-based XSS, and writing secure client side code. Closely related
is general security for gadget developers.
* Protecting private information (i.e., when do developers need to
check if data has been deleted / suppressed)

We'll spend a little time talking about each subject (and some
specific issues we've seen recently), and I'll have a rough article
outline in an etherpad. Then I would like everyone's help fleshing out
the documents so they are clear and informative for other developers
of all skill levels.

I'll have both a google hangout for video, and an audio line for
anyone who prefers to avoid closed technology. If you want to dial in,
please let me know so I can get you a phone number in advance.

Chris

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l




--
Rob Moen
Wikimedia Foundation
rm...@wikimedia.org
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l



___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Secure Coding Documentation

2012-12-21 Thread Chris Steipp
Hey all, I'm having some AV issues... I'll send out the link once I
can get a working microphone. We may start up a couple minutes late.
Sorry about that!

On Fri, Dec 21, 2012 at 11:24 AM, Krenair kren...@gmail.com wrote:
 It's 19:23 now so this starts in under 10 minutes. Can I have the link
 please?

 Alex


 On 21/12/12 15:53, Chris Steipp wrote:

 Yep, I'll send out a link about 30 minutes before we start, and post it on
 irc too. Hope you can join in!
 On Dec 20, 2012 8:13 PM, Tyler Romeo tylerro...@gmail.com wrote:

 I might join in. I'm guessing the Hangout link will be sent via the
 mailing
 list?

 *--*
 *Tyler Romeo*
 Stevens Institute of Technology, Class of 2015
 Major in Computer Science
 www.whizkidztech.com | tylerro...@gmail.com


 On Thu, Dec 20, 2012 at 5:41 PM, Rob Moen rm...@wikimedia.org wrote:

 This is great Chris.  Airport wifi permitted, I will gladly tune in.


 On Wed, Dec 19, 2012 at 7:11 PM, Chris Steipp cste...@wikimedia.org
 wrote:

 Hi Everyone,

 I'd like to invite anyone interested to join in on a secure coding
 documentation sprint on Friday of this week (Dec 21st), from 11:30am -
 12:30pm PST (19:30-20:30 UTC). If you're interested in joining, but
 can't make that specific time, let me know and we may hold more of
 these if there's interest.

 The goal of this sprint is to both help anyone who is interested learn
 about some specific security vulnerabilities, and update our
 documentation so that new developers can avoid these issues in the
 future.

 On Friday, I would like to address a couple of topics where we have
 very little documentation:
 * DOM-based XSS, and writing secure client side code. Closely related
 is general security for gadget developers.
 * Protecting private information (i.e., when do developers need to
 check if data has been deleted / suppressed)

 We'll spend a little time talking about each subject (and some
 specific issues we've seen recently), and I'll have a rough article
 outline in an etherpad. Then I would like everyone's help fleshing out
 the documents so they are clear and informative for other developers
 of all skill levels.

 I'll have both a google hangout for video, and an audio line for
 anyone who prefers to avoid closed technology. If you want to dial in,
 please let me know so I can get you a phone number in advance.

 Chris

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l



 --
 Rob Moen
 Wikimedia Foundation
 rm...@wikimedia.org
 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l



 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


[Wikitech-l] Any OSCON plans?

2012-12-21 Thread Quim Gil

OSCON call for papers is now open:

July 22-26 at Portland (USA)
http://www.oscon.com/oscon2013

Anybody considering? Thoughts?

If we are interested: OSCON is a tough venue when it comes to get 
proposals accepted. Good planning and coordination does help, and this 
is why I'm asking here  now.


--
Quim Gil
Technical Contributor Coordinator @ Wikimedia Foundation
http://www.mediawiki.org/wiki/User:Qgil

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Secure Coding Documentation

2012-12-21 Thread Chris Steipp
Sorry for the delay, this link should work!

https://plus.google.com/hangouts/_/8e5a52bc254a36c4c78b2a999110fb10a2a3f32c

On Fri, Dec 21, 2012 at 11:27 AM, Chris Steipp cste...@wikimedia.org wrote:
 Hey all, I'm having some AV issues... I'll send out the link once I
 can get a working microphone. We may start up a couple minutes late.
 Sorry about that!

 On Fri, Dec 21, 2012 at 11:24 AM, Krenair kren...@gmail.com wrote:
 It's 19:23 now so this starts in under 10 minutes. Can I have the link
 please?

 Alex


 On 21/12/12 15:53, Chris Steipp wrote:

 Yep, I'll send out a link about 30 minutes before we start, and post it on
 irc too. Hope you can join in!
 On Dec 20, 2012 8:13 PM, Tyler Romeo tylerro...@gmail.com wrote:

 I might join in. I'm guessing the Hangout link will be sent via the
 mailing
 list?

 *--*
 *Tyler Romeo*
 Stevens Institute of Technology, Class of 2015
 Major in Computer Science
 www.whizkidztech.com | tylerro...@gmail.com


 On Thu, Dec 20, 2012 at 5:41 PM, Rob Moen rm...@wikimedia.org wrote:

 This is great Chris.  Airport wifi permitted, I will gladly tune in.


 On Wed, Dec 19, 2012 at 7:11 PM, Chris Steipp cste...@wikimedia.org
 wrote:

 Hi Everyone,

 I'd like to invite anyone interested to join in on a secure coding
 documentation sprint on Friday of this week (Dec 21st), from 11:30am -
 12:30pm PST (19:30-20:30 UTC). If you're interested in joining, but
 can't make that specific time, let me know and we may hold more of
 these if there's interest.

 The goal of this sprint is to both help anyone who is interested learn
 about some specific security vulnerabilities, and update our
 documentation so that new developers can avoid these issues in the
 future.

 On Friday, I would like to address a couple of topics where we have
 very little documentation:
 * DOM-based XSS, and writing secure client side code. Closely related
 is general security for gadget developers.
 * Protecting private information (i.e., when do developers need to
 check if data has been deleted / suppressed)

 We'll spend a little time talking about each subject (and some
 specific issues we've seen recently), and I'll have a rough article
 outline in an etherpad. Then I would like everyone's help fleshing out
 the documents so they are clear and informative for other developers
 of all skill levels.

 I'll have both a google hangout for video, and an audio line for
 anyone who prefers to avoid closed technology. If you want to dial in,
 please let me know so I can get you a phone number in advance.

 Chris

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l



 --
 Rob Moen
 Wikimedia Foundation
 rm...@wikimedia.org
 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l



 ___
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Secure Coding Documentation

2012-12-21 Thread Matthew Flaschen
On 12/21/2012 02:43 PM, Chris Steipp wrote:
 Sorry for the delay, this link should work!
 
 https://plus.google.com/hangouts/_/8e5a52bc254a36c4c78b2a999110fb10a2a3f32c

I started an Etherpad for notes.

http://etherpad.wmflabs.org/pad/p/secure_documentation

Matt Flaschen

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Any OSCON plans?

2012-12-21 Thread Luke Welling WMF
I've spoken at it the last 13 years, but I was thinking of skipping it this
time.

I've also been on the committee the last few years.  I don't yet know if I
will be this year, but if you want my perspective on  what gets accepted
I'd be happy to share it.  In general state of TechnologyX is tough to
get accepted unless you are Rasmus, Larry or Guido. How we did
challenging new project at high profile site with technologyX is a
much better bet. OSCON always runs some talks along the lines of saving
the world with open culture, so a charismatic speaker with a non-obvious
spin on that is worth a shot.

Luke Welling


On Fri, Dec 21, 2012 at 2:35 PM, Quim Gil q...@wikimedia.org wrote:

 OSCON call for papers is now open:

 July 22-26 at Portland (USA)
 http://www.oscon.com/oscon2013

 Anybody considering? Thoughts?

 If we are interested: OSCON is a tough venue when it comes to get
 proposals accepted. Good planning and coordination does help, and this is
 why I'm asking here  now.

 --
 Quim Gil
 Technical Contributor Coordinator @ Wikimedia Foundation
 http://www.mediawiki.org/wiki/**User:Qgilhttp://www.mediawiki.org/wiki/User:Qgil

 __**_
 Wikitech-l mailing list
 Wikitech-l@lists.wikimedia.org
 https://lists.wikimedia.org/**mailman/listinfo/wikitech-lhttps://lists.wikimedia.org/mailman/listinfo/wikitech-l

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


[Wikitech-l] MediaWiki Group Ciudad de México

2012-12-21 Thread Jacobo Nájera

Hi, following the process for requesting the creation of a MediaWiki
group, here is a proposal for:

MediaWiki Group Ciudad de México

http://www.mediawiki.org/wiki/Groups/Proposals/Ciudad_de_M%C3%A9xico

Your endorsements, improvements and feedback are welcome at the wiki
page. Thank you!

PS: see also http://www.mediawiki.org/wiki/Groups/Proposals


Jacobo

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Follow / like MediaWiki @ social media

2012-12-21 Thread Matthew Flaschen
On 12/21/2012 01:30 PM, Chad wrote:

 You should also consider making http://app.net/mediawiki .  app.net is
 an ad-free subscription social network, and it's currently very popular
 with us techies (but broadening its base).

 
 Fwiw, I've never even heard of this until now.

Yeah, it's still expanding.  Their decision to go ad-free means they use
paid subscriptions, which is part of why growth is more gradual.

Matt Flaschen

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Follow / like MediaWiki @ social media

2012-12-21 Thread Matthew Flaschen
On 12/21/2012 01:24 PM, Quim Gil wrote:
 Thank you for the suggestion. Do you (or someone you know) want to
 maintain that? We can talk.

Yes, I'm willing to step up to do that.

We would have to decide how to do it.  They allow up to 256 characters,
along with optional embedded media (images/video, etc.)

Matt Flaschen

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l


Re: [Wikitech-l] Follow / like MediaWiki @ social media

2012-12-21 Thread Quim Gil

On 12/21/2012 02:45 PM, Matthew Flaschen wrote:

On 12/21/2012 01:24 PM, Quim Gil wrote:

Thank you for the suggestion. Do you (or someone you know) want to
maintain that? We can talk.


Yes, I'm willing to step up to do that.

We would have to decide how to do it.  They allow up to 256 characters,
along with optional embedded media (images/video, etc.)


Great! Let's get into details at

https://www.mediawiki.org/wiki/Talk:Social_media

not to bother the entire list. Start a thread with your proposal or 
questions and I will follow.


And since you are reading this, what about signing up (or at least 
endorse) MediaWiki Group Promotion?


https://www.mediawiki.org/wiki/Groups/Proposals/Promotion

( was Marketing, but we just renamed it)

This will be the group where we will coordinate our social media work, 
among other things.


--
Quim Gil
Technical Contributor Coordinator @ Wikimedia Foundation
http://www.mediawiki.org/wiki/User:Qgil

___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l