[Wikitech-l] InlineEditor new version (previously Sentence-Level Editing)

2010-10-25 Thread Jan Paul Posma
Hi all, As presented last Saturday at the Hack-A-Ton, I've committed a new version of the InlineEditor extension. [1] This is an implementation of the sentence-level editing demo posted a few months ago. Basically what this new version does is building a tree structure from all the markings.

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread Paul Houle
On 10/24/2010 8:42 PM, Aryeh Gregor wrote: My first thought was to write a GPU program to crack MediaWiki password hashes as quickly as possible, then use what we've studied in class about GPU architecture to design a hash function that would be as slow as possible to crack on a GPU relative

[Wikitech-l] Firesheep

2010-10-25 Thread Hay (Husky)
Has anyone seen this? http://codebutler.com/firesheep A new Firefox plugin that makes it trivially easy to hijack cookies from a website that's using HTTP for login over an unencrypted wireless network. Wikipedia isn't in the standard installation as a site (lots of other sites, such as

Re: [Wikitech-l] Firesheep

2010-10-25 Thread Marco Schuster
On Mon, Oct 25, 2010 at 7:15 PM, Hay (Husky) hus...@gmail.com wrote: Has anyone seen this? http://codebutler.com/firesheep A new Firefox plugin that makes it trivially easy to hijack cookies from a website that's using HTTP for login over an unencrypted wireless network. Wikipedia isn't in

Re: [Wikitech-l] Firesheep

2010-10-25 Thread Roan Kattouw
2010/10/25 Marco Schuster ma...@harddisk.is-a-geek.org: The admin in question doesn't even have to visit Wikipedia directly, there are enough pages hotlinking to upload.wikimedia.org, which should cause the browser to transmit session data. Actually it won't, because upload.wikimedia.org is a

Re: [Wikitech-l] Firesheep / HTTPS by default

2010-10-25 Thread Neil Kandalgaonkar
To really fix the problem we would have to go HTTPS by default. I don't know what that means to our resource usage, as well as how it affects people who cannot use HTTPS for whatever reason. By the way, there is a plugin for Firefox called HTTPS Everywhere, which will attempt to switch to

Re: [Wikitech-l] Firesheep / HTTPS by default

2010-10-25 Thread Chad
On Mon, Oct 25, 2010 at 2:45 PM, Neil Kandalgaonkar ne...@wikimedia.org wrote: [snip] but we do with commons.wikimedia.org, and there's no HTTPS equivalent. It's on secure.wikimedia.org, like all the other sites https://secure.wikimedia.org/wikipedia/commons/wiki/Main_Page -Chad

[Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Erik Moeller
Hello all, for some types of resources, it's desirable to upload source files (whether it's Blender, COLLADA, Scribus, EDL, or some other format), so that others can more easily remix and process them. Currently, as far as I know, there's no way to upload these resources to Commons. What would

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Max Semenik
On 25.10.2010, 23:02 Erik wrote: Hello all, for some types of resources, it's desirable to upload source files (whether it's Blender, COLLADA, Scribus, EDL, or some other format), so that others can more easily remix and process them. Currently, as far as I know, there's no way to upload

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Michael Dale
On 10/25/2010 12:02 PM, Erik Moeller wrote: Hello all, for some types of resources, it's desirable to upload source files (whether it's Blender, COLLADA, Scribus, EDL, or some other format), so that others can more easily remix and process them. Currently, as far as I know, there's no way to

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Aryeh Gregor
On Mon, Oct 25, 2010 at 3:50 PM, Max Semenik maxsem.w...@gmail.com wrote: Instead of amassing social constructs around technical deficiency, I propose to fix bug 24230 [1] by implementing proper checking for JAR format. Does that bug even affect Wikimedia? We have uploads segregated on their

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Platonides
Aryeh Gregor wrote: On Mon, Oct 25, 2010 at 3:50 PM, Max Semenik maxsem.w...@gmail.com wrote: Instead of amassing social constructs around technical deficiency, I propose to fix bug 24230 [1] by implementing proper checking for JAR format. Does that bug even affect Wikimedia? We have

Re: [Wikitech-l] Firesheep

2010-10-25 Thread Aryeh Gregor
On Mon, Oct 25, 2010 at 1:15 PM, Hay (Husky) hus...@gmail.com wrote: A new Firefox plugin that makes it trivially easy to hijack cookies from a website that's using HTTP for login over an unencrypted wireless network. It doesn't hijack login, it hijacks cookies, so we're only protected if we

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Marco Schuster
On Mon, Oct 25, 2010 at 10:09 PM, Aryeh Gregor simetrical+wikil...@gmail.com wrote: On Mon, Oct 25, 2010 at 3:50 PM, Max Semenik maxsem.w...@gmail.com wrote: Instead of amassing social constructs around technical deficiency, I propose to fix bug 24230 [1] by implementing proper checking for JAR

Re: [Wikitech-l] Firesheep

2010-10-25 Thread David Gerard
On 25 October 2010 21:37, Aryeh Gregor simetrical+wikil...@gmail.com wrote: http://en.wikipedia.org/wiki/Server_Name_Indication But those might not be reliably usable yet. Per the article, approximately no-one uses SNI as yet because IE on XP will never be capable of it. (Firefox and Chrome

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Martijn Hoekstra
On Mon, Oct 25, 2010 at 10:51 PM, Marco Schuster ma...@harddisk.is-a-geek.org wrote: On Mon, Oct 25, 2010 at 10:09 PM, Aryeh Gregor simetrical+wikil...@gmail.com wrote: On Mon, Oct 25, 2010 at 3:50 PM, Max Semenik maxsem.w...@gmail.com wrote: Instead of amassing social constructs around

Re: [Wikitech-l] Firesheep

2010-10-25 Thread George Herbert
On Mon, Oct 25, 2010 at 1:37 PM, Aryeh Gregor simetrical+wikil...@gmail.com wrote: [...] Anyway, this is all doable in principle, yes.  It will probably impose no significant processing overhead, CPUs are powerful enough today that TLS shouldn't be a big deal.  (I recall hearing that Google

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread Aryeh Gregor
On Mon, Oct 25, 2010 at 12:38 PM, Paul Houle p...@ontology2.com wrote:     I want Wikipedia converted into facts in a representation system that supports modal,  temporal,  and microtheory reasoning.  You know,  in the real world,  :James_T_Kirk is a :Fictional_Character, but in the Star Trek

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Platonides
Martijn Hoekstra wrote: Should we also be exploring any possibly malicious archives inside archives recursively, or is just making sure the archive itself is good is good enough? I think that we should block such files. Also note that we can't recursively analyse everything since that would

Re: [Wikitech-l] Commons ZIP file upload for admins

2010-10-25 Thread Brion Vibber
On Mon, Oct 25, 2010 at 1:05 PM, Michael Dale md...@wikimedia.org wrote: Its most ideal if we actually support these formats, so we can do thing like thumbnails, basic meta data etc. Failing that its better to support a given file extension, then it is to support zip files. This way if in

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread Aryeh Gregor
On Mon, Oct 25, 2010 at 6:09 PM, Ariel T. Glenn ar...@wikimedia.org wrote: I am following this discussion and happy to bat around ideas if there's something that might be appropriate for your course, Aryeh. Well, is there? Anything that needs to be parallelized, or that's already parallelized

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread George Herbert
On Mon, Oct 25, 2010 at 4:04 PM, Aryeh Gregor simetrical+wikil...@gmail.com wrote: On Mon, Oct 25, 2010 at 6:09 PM, Ariel T. Glenn ar...@wikimedia.org wrote: I am following this discussion and happy to bat around ideas if there's something that might be appropriate for your course, Aryeh.

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread Aryeh Gregor
On Mon, Oct 25, 2010 at 7:15 PM, George Herbert george.herb...@gmail.com wrote: (suppressing grumbles about diff engine for edit conflicts, probably an algorithm rather than speed issue) Diffs are fast enough if you use wikidiff2, no? I suspect that the MySQL engine is the one place where

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread George Herbert
On Mon, Oct 25, 2010 at 4:24 PM, Aryeh Gregor simetrical+wikil...@gmail.com wrote: On Mon, Oct 25, 2010 at 7:15 PM, George Herbert george.herb...@gmail.com wrote: (suppressing grumbles about diff engine for edit conflicts, probably an algorithm rather than speed issue) Diffs are fast enough

Re: [Wikitech-l] Parallel computing project

2010-10-25 Thread Robert Rohde
Many of the things done for the statistical analysis of database dumps should be suitable for parallelization (e.g. break the dump into chunks, process the chunks in parallel and sum the results). You could talk to Erik Zachte. I don't know if his code has already been designed for parallel

Re: [Wikitech-l] Firesheep

2010-10-25 Thread John Vandenberg
On Tue, Oct 26, 2010 at 10:01 AM, Aryeh Gregor simetrical+wikil...@gmail.com wrote: Gmail typically contains things like credit card numbers, passwords, maybe state secrets if you pick the right person .. at most you could compromise an admin account .. or an account with checkuser or

[Wikitech-l] Pending Changes development update: October 25

2010-10-25 Thread Rob Lanphier
Hi everyone, This is another update on Pending Changes work. Over the Hack-a-ton weekend, Chad Horohoe and Priyanka Dhanda worked on two of the bigger features for the November 16 Pending Changes update: Bug 25294 - Reject button confirmation screen in Pending Changes