Re: [Wikitech-l] Persian Wikimedia cryptocurrency mining incident

2018-03-14 Thread Amir Ladsgroup 
Translated and posted in Persian Wikipedia's WP:VP. [0]
Posting the translation here, in case it would be useful:

«در ۱۴ مارس ۲۰۱۸، اسنادی از استفاده از نرم‌افزار استخراج پول مجازی در
ویکی‌پدیای فارسی کشف شد. این کشف توسط جامعه کاربران اتفاق افتاد و در کمتر
از ده دقیقه بعد از اضافه شدن به وب‌گاه حذف گردید. علاوه بر آن، دسترسی‌های
کاربر مسئول حذف و حسابش سراسری بسته شد. تاکنون هیچ مدرکی دال بر به خطر
افتادن حساب یا رایانه کاربری وجود ندارد. اما ما همگان را به انجام
فعالیت‌های معمول برای داشتن رایانه و حساب امن توصیه می‌کنیم که شامل تغییر
مداوم گذرواژه‌تان، استفاده فعالانه از نرم‌افزارهای ضدویروس، و بروزنگه‌داشتن
سامانه‌تان است. تیم امنیت بنیاد ویکی‌مدیا در حال بررسی این اتفاق و بررسی
پتانسیل‌های بهبود برای جلوگیری از وقوع موارد مشابه در آینده است. اگر سوالی
داشتید لطفا با تیم امنیت (security-team[image: @]wikimedia.org <
http://wikimedia.org/>) تماس بگیرید. عذرخواهی برای فرستادن به انگلیسی،
ترجمه آن به فارسی مزید امتنان خواهد بود. تشکر، جان بنت.»

[0]
https://fa.wikipedia.org/w/index.php?oldid=22372929#%D8%A7%D8%AA%D9%81%D8%A7%D9%82_%D9%85%D8%B1%D8%A8%D9%88%D8%B7_%D8%A8%D9%87_%D8%A7%D8%B3%D8%AA%D8%AE%D8%B1%D8%A7%D8%AC_%D9%BE%D9%88%D9%84_%D9%85%D8%AC%D8%A7%D8%B2%DB%8C_%D8%AF%D8%B1_%D9%88%DB%8C%DA%A9%DB%8C%E2%80%8C%D9%BE%D8%AF%DB%8C%D8%A7%DB%8C_%D9%81%D8%A7%D8%B1%D8%B3%DB%8C

On Thu, Mar 15, 2018 at 12:29 AM John Bennett 
wrote:

> *On 14 March 2018, evidence of cryptocurrency mining software was
> discovered on Persian Wikipedia. It was identified by the community and
> removed within 10 minutes of being added to the site. Additionally, the
> rights of the user responsible have been revoked and their account has been
> globally locked. At this time there is no evidence of any user's computer
> or account being compromised or otherwise affected. However, we encourage
> everyone to take some routine steps to maintain a secure computer and
> account - including regularly changing your passwords, actively running
> antivirus software on your systems, and keeping your system software up to
> date. The Wikimedia Foundation's Security team is investigating this
> incident as well as potential improvements to prevent future incidents. If
> you have any questions, please contact the Security team
> (security-team{{@}}wikimedia.org ). Apologies for
> only posting in English, translating and reposting in Fārsi would be
> greatly appreciated.Thanks,John Bennett*
> ___
> Wikitech-l mailing list
> Wikitech-l@lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikitech-l
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Persian Wikimedia cryptocurrency mining incident

2018-03-14 Thread Vi to 
How many external (non WMF-sites) js do we need?

Vito

2018-03-15 0:28 GMT+01:00 John Bennett :

> *On 14 March 2018, evidence of cryptocurrency mining software was
> discovered on Persian Wikipedia. It was identified by the community and
> removed within 10 minutes of being added to the site. Additionally, the
> rights of the user responsible have been revoked and their account has been
> globally locked. At this time there is no evidence of any user's computer
> or account being compromised or otherwise affected. However, we encourage
> everyone to take some routine steps to maintain a secure computer and
> account - including regularly changing your passwords, actively running
> antivirus software on your systems, and keeping your system software up to
> date. The Wikimedia Foundation's Security team is investigating this
> incident as well as potential improvements to prevent future incidents. If
> you have any questions, please contact the Security team
> (security-team{{@}}wikimedia.org ). Apologies for
> only posting in English, translating and reposting in Fārsi would be
> greatly appreciated.Thanks,John Bennett*
> ___
> Wikitech-l mailing list
> Wikitech-l@lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/wikitech-l
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l

[Wikitech-l] Persian Wikimedia cryptocurrency mining incident

2018-03-14 Thread John Bennett 
*On 14 March 2018, evidence of cryptocurrency mining software was
discovered on Persian Wikipedia. It was identified by the community and
removed within 10 minutes of being added to the site. Additionally, the
rights of the user responsible have been revoked and their account has been
globally locked. At this time there is no evidence of any user's computer
or account being compromised or otherwise affected. However, we encourage
everyone to take some routine steps to maintain a secure computer and
account - including regularly changing your passwords, actively running
antivirus software on your systems, and keeping your system software up to
date. The Wikimedia Foundation's Security team is investigating this
incident as well as potential improvements to prevent future incidents. If
you have any questions, please contact the Security team
(security-team{{@}}wikimedia.org ). Apologies for
only posting in English, translating and reposting in Fārsi would be
greatly appreciated.Thanks,John Bennett*
___
Wikitech-l mailing list
Wikitech-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikitech-l