Re: [Wikitech-l] Let's improve our password policy
If feel like I should reiterate why I proposed this change. Maybe no one cares, but I think it might help convince folks this is NOT an argument for let's reduce user freedom in the name of security. I didn't worked on the RFC because I love tinkering with password security in my spare time and know lots about it. Far from it. I did it because I think we're failing MediaWiki users on *all installations* by inviting them to sign up for an account, and then failing to set default requirements that help them adequately secure those accounts. Users tend to follow defaults and do the minimum effort to reach their goals -- in this case to sign up and then get editing. It's our job as the MediaWiki designers and developers to set good defaults that encourage account security without being excessively annoying. In addition to just being sane about security defaults, there is more. Allow me to wax poetic a moment... If you can edit anonymously, why do we allow and encourage registration at all? Many reasons of course, but one of them is because it is a rewarding experience to have a persistent identity on a wiki. We all know how real that identity becomes sometimes. When I meet Krinkle or MZMcbride in real life, I don't call them Timo and Max. Or if I do, I don't think of them as those names in my head. When wiki users start an account, they might think that they are just creating something unimportant. They may actually have bad intentions. But part of this is that we're offering people an account because it gives them a chance to be recognized, implicitly and explicitly, for the work they do on our wikis. I think setting a default of 1 character passwords required doesn't reinforce the idea that an account is something you might actually come to cherish a bit, and that it might even represent you in some important way to others. By signaling to new users that an account is so worthless that it's cool if you have a one character password... well, is that really such a good thing? On Thu, Feb 6, 2014 at 5:44 PM, MZMcBride z...@mzmcbride.com wrote: P.S. I also casually wonder whether there's a reasonable argument to be made here that requiring longer passwords will hurt editor retention more than it helps, but this thought is still largely unformed and unfocused. I think that's a canard. There are many many sites that do not have user acquisition or retention problems, while also having sane password length requirements. Yes, this is a potential extra roadblock, which may slightly reduce conversion rates on the signup form by slowing people down. However, one of the clear arguments in favor of doing this now (as opposed to say, back in 2001) is that users will largely expect an account on a popular website to require them to have a password longer than 1 character. If we really are scared about the requirements in our signup form driving people away from editing, we can make many user experience improvements that would, like every other site, offset the terrible awful horrible evil of requiring a six character password. I'd be happy to list specifics if someone wants, but this email is already too long. Steven ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] The Zürich Hackathon and you
On Fri, Feb 7, 2014 at 1:17 AM, Quim Gil q...@wikimedia.org wrote: you can ask any questions about the event to Manuel, CCed. It could be just my mail client (gmail) but I do not see anybody in cc. Željko ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] The Zürich Hackathon and you
Now in cc Am 07.02.2014 10:26 schrieb Željko Filipin zfili...@wikimedia.org: On Fri, Feb 7, 2014 at 1:17 AM, Quim Gil q...@wikimedia.org wrote: you can ask any questions about the event to Manuel, CCed. It could be just my mail client (gmail) but I do not see anybody in cc. Željko ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] The Zürich Hackathon and you
On Fri, Feb 7, 2014 at 12:22 PM, rupert THURNER rupert.thur...@gmail.comwrote: Now in cc I still do not see anybody in cc. Maybe wikitech removes cc header. Željko ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Let's improve our password policy
Actually to be honest, if I could login to Mediawiki with a public/private keypair I would actually really enjoy that. Certainly it shouldn't be the default, but in a very non-joking way, I would support an initiative to add that as an option. You mean kind of like this? https://www.mediawiki.org/wiki/Extension:SSLClientAuthentication Pretty close. I was actually thinking well known PGP keypair, but SSL cert signed by a trusted CA works just as well. I'll fool around with that extension later today. Thank you! Thank you, Derric Atzrott ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] The Zürich Hackathon and you
I read this list. Here I am ;-) -- Sent via mobile phone (+41 79 8646121 / +43 680 2437847 / +49 160 90803992) Željko Filipin zfili...@wikimedia.org schrieb: On Fri, Feb 7, 2014 at 12:22 PM, rupert THURNER rupert.thur...@gmail.comwrote: Now in cc I still do not see anybody in cc. Maybe wikitech removes cc header. Željko ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] TitleValue
Am 06.02.2014 21:09, schrieb Sumana Harihareswara: I agree that this mailing list is a reasonable place to discuss the interfaces. Notes from the Architecture Summit are now up at https://www.mediawiki.org/wiki/Architecture_Summit_2014/TitleValue# . At yesterday's RFC review we agreed that we'd like to hold another one next week (will figure out a good date/time with Nik, Daniel, and the architects) and discuss TitleValue, see if there's anything that needs moving forward. That would be great, better still if it was during business-hours for me :) I'm currently working on an alternative approach to the PageLinker and TitleFormatter interfaces, which would result in fewer classes. I'm not sure whether that approach is actually better yet, but since several people have expressed a preference for this, I would like to give it a try. I hope to have this done some time next week. -- daniel ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] Core unit tests passing under HHVM 2.4
Core's unit tests are passing integration tests on Travis CI under the latest release of HHVM: https://travis-ci.org/wikimedia/mediawiki-core/builds/18445085 --- Ori Livneh o...@wikimedia.org ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Core unit tests passing under HHVM 2.4
Can we maybe add this into Jenkins somehow? It'd be kind of nice if we could make sure from now on that no patches break unit tests in HHVM. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Fri, Feb 7, 2014 at 3:07 PM, Ori Livneh o...@wikimedia.org wrote: Core's unit tests are passing integration tests on Travis CI under the latest release of HHVM: https://travis-ci.org/wikimedia/mediawiki-core/builds/18445085 --- Ori Livneh o...@wikimedia.org ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] Deployment and roadmap updates - week of February 10th
Here is your weekly deployment and roadmap highlights email. As always, you can track upcoming deployments via this page: https://wikitech.wikimedia.org/wiki/Deployments#Near-term == Monday == Extension:MobileApp deployed to production. New Mobile Apps (to be launched in end Feb) will have a content styling different from mobile web, supported by the MobileApp extension, so that it can update styling without having to do an app store update. https://www.mediawiki.org/wiki/Extension:MobileApp == Tuesday == MediaWiki: group1 to 1.23wmf13: All non-Wikipedia sites (Wiktionary, Wikisource, Wikinews, Wikibooks, Wikiquote, Wikiversity, and a few other sites) https://www.mediawiki.org/wiki/MediaWiki_1.23/Roadmap#Schedule_for_the_deployments Flow: Convert flow UUID's from 128 bit base16 to 88 bit base36. Requires time in read-only mode (flow only). Relevant commit with explanatory commit message: https://gerrit.wikimedia.org/r/#/c/98995/ https://www.mediawiki.org/wiki/Flow_Portal == Thursday == MediaWiki: group2 to 1.23wmf13 (all Wikipedias) group0 to 1.23wmf14 (test/test2/testwikidata/mediawiki) Thanks! Greg -- | Greg GrossmeierGPG: B2FA 27B1 F7EB D327 6B8E | | identi.ca: @gregA18D 1138 8E47 FAC8 1C7D | signature.asc Description: Digital signature ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] The poem tag to be known as lines
For some time, work has been ongoing on a merge of the Poem extension into MediaWiki core [1] [2]. (For those not aware, this extension [3] implements a simple poem tag which, among other things, preserves newlines.) Several developers have expressed the desire for an alternative name for this tag, alongside poem (which of course will be kept for backward compatibility). This is because the tag is sometimes used for various other uses besides poetry. There were many suggestions (see the bug report [1]), but it was eventually agreed to use Michael M.'s suggestion of lines. This name puts the focus on the individual lines of the content, which is exactly what the tag is doing. We almost had a collision with a previous proposal (verbatim conflicted with a tag in use on Wikia), so we wish to ensure that no-one else is using lines. No-one is yet aware of any MediaWiki extensions or other code using a tag named lines in wikitext. If you think the name lines will be an issue, or if you have any other concerns with this merge, please speak up, either here or at the bug report. TTO -- [1] https://bugzilla.wikimedia.org/show_bug.cgi?id=52061 [2] https://gerrit.wikimedia.org/r/#/c/106861/ [3] https://www.mediawiki.org/wiki/Extension:Poem ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Google Summer of Code 2014 starts NOW
Last email before starting my holidays. I just submitted the Wikimedia application for GSoC 2014. That is all the bureaucracy we needed to fill at this point. https://www.mediawiki.org/wiki/Google_Summer_of_Code_2014 Two people have volunteered as org co-admins. Thank you! Let's decide our roles if/when Wikimedia is selected. * We need to add proposals with mentors and community buy-in under the Featured project ideas section at https://www.mediawiki.org/wiki/Mentorship_programs/Possible_projects#Featured_project_ideas . Either you step in now, or you wait at least six months until the next call. Interested? Just edit the page. The sooner the better. This is still true. Alright. If there is anything urgent related with GSoC or any of my tasks please contact Sumana. Thank you! -- Quim Gil Technical Contributor Coordinator @ Wikimedia Foundation http://www.mediawiki.org/wiki/User:Qgil ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
