[Wikitech-l] Report on last year's Freenode security breach

2015-09-19 Thread Pine W
I just now see that there was a report published about last year's security breach on Freenode. The report, written by NCC Group’s Cyber Defence Operations team, may be of interest to infrastructure security and tech ops people: https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2014

[Wikitech-l] Upcoming database purge on Freenode

2015-09-19 Thread Pine W
Freenode occasionally purges its databases of "expired nicks, channels and accounts". If you have a nick, channel or account that you want to keep and haven't used recently, now is a good time to do so. See https://blog.freenode.net/2015/09/services-database-purge/ for more info. Please send any qu

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread bawolff
maintain is an ambiguous word. WMF has some responsibility to all the extensions deployed on cluster (imo). If Devunt (and any others who were knowledgeable of the Josa extension) disappeared, WMF would default to becoming responsible for the security and critical issues in the extension (However,

[Wikitech-l] Help needed with reading strategy process

2015-09-19 Thread Moushira Elamrawy
Greetings, The reading team has been having a series of meetings as part of the ongoing strategy process,. We documented and clarified as much details as possible, here , in order to empower everyone to become part of the process,

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Thomas Mulhall
Yes but josa is currently maintained when this extension isent. On Saturday, 19 September 2015, 12:25, Yongmin Hong wrote: Deployed on wmf cluster does not necessarilly means wmf has to maintain it. A simple example: [[mw:Extension:Josa]]. It's maintained by 3rd party developer in

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Yongmin Hong
Deployed on wmf cluster does not necessarilly means wmf has to maintain it. A simple example: [[mw:Extension:Josa]]. It's maintained by 3rd party developer independant from WMF. For example, (IIRC/AFAIK,) WMF has no staffs with Korean knowledge. [[Extension:Josa]]: https://www.mediawiki.org/wiki/E

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Thomas Mulhall
Ok yes but Wikimedia currently maintains CentralAuth if not they do update the code and review without the author. On Saturday, 19 September 2015, 9:41, Keegan Peterzell wrote: On Sat, Sep 19, 2015 at 2:03 AM, Risker wrote: > Well, bluntly put, since LDAP is how most non-WMF staf

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Thomas Mulhall
Since this is deployed on wikitech It should be maintained by Wikimedia since it is unmaintained and its better that Wikimedia maintain it because they have more staff that can review and because they have more experience in doing reviews and code review. On Saturday, 19 September 2015,

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Keegan Peterzell
On Sat, Sep 19, 2015 at 2:13 AM, Keegan Peterzell wrote: > > > On Sat, Sep 19, 2015 at 2:03 AM, Risker wrote: > >> Well, bluntly put, since LDAP is how most non-WMF staff sign into >> phabricator, I'd say it's become an essential extension. >> > Even more technically, this (LDAP) is for people c

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Keegan Peterzell
On Sat, Sep 19, 2015 at 2:13 AM, Keegan Peterzell wrote: > > It's also possible to cross the streams. My Phabricator account was > registered through LDAP and I registered it with CentralAuth to connect all > the Keegans . > > https://phabricator.wikimedia.org/settings/panel/external/ If you've

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Keegan Peterzell
On Sat, Sep 19, 2015 at 2:13 AM, Keegan Peterzell wrote: > > > On Sat, Sep 19, 2015 at 2:03 AM, Risker wrote: > >> Well, bluntly put, since LDAP is how most non-WMF staff sign into >> phabricator, I'd say it's become an essential extension. >> >> So yeah, this one should be taken over by WMF sta

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Keegan Peterzell
On Sat, Sep 19, 2015 at 2:03 AM, Risker wrote: > Well, bluntly put, since LDAP is how most non-WMF staff sign into > phabricator, I'd say it's become an essential extension. > > So yeah, this one should be taken over by WMF staff. > I'm welcome to correction, but I believe the opposite is true:

Re: [Wikitech-l] LDAP extension ownership

2015-09-19 Thread Risker
Well, bluntly put, since LDAP is how most non-WMF staff sign into phabricator, I'd say it's become an essential extension. So yeah, this one should be taken over by WMF staff. Risker/Anne On 18 September 2015 at 12:54, Greg Grossmeier wrote: > > > Hi maybe Wikimedia can maintain if they want