Re: [Wikitech-l] 1.22.0rc3 ready for download

2013-12-05 Thread Tyler Romeo
On Tue, Dec 3, 2013 at 4:39 PM, John wrote: > VE is a BAD idea, its full of holes and bugs Those are two separate concepts. Just because something has bugs does not make the software itself a bad idea. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Compu

Re: [Wikitech-l] RFC: Structured logging

2013-12-03 Thread Tyler Romeo
The RFC on third-party components may interest you: https://www.mediawiki.org/wiki/Requests_for_comment/Third-party_components If we use the Monolog library, which is used in Symfony and others, we can avoid having to re-implement an entire logging framework. *-- * *Tyler Romeo* Stevens

Re: [Wikitech-l] Solution for Third-Party Dependencies

2013-11-26 Thread Tyler Romeo
I'll continue on the search for more third-party components, but right now those listed seem like the main candidates (although even some of those listed would be really difficult to do and might not happen). *-- * *Tyler Romeo* Stevens Institute of Te

[Wikitech-l] Solution for Third-Party Dependencies

2013-11-26 Thread Tyler Romeo
e, much much more functional, and a lot easier to use. However, this is out-of-scope for the discussion, so if you have an opinion on whether doing this is a good/bad idea, please start another thread. *-- * *Tyler Romeo* Stevens Institute of Technology, Clas

Re: [Wikitech-l] Facebook Open Academy

2013-11-19 Thread Tyler Romeo
l free to leave it out. Thanks in advance. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Applying nofollow only to external links added in revisions that are still unpatrolled

2013-11-18 Thread Tyler Romeo
artifically, which seems to be the case. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] MediaWiki performance analysis

2013-11-15 Thread Tyler Romeo
ys best just to go with the flow? ;) *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Comet

2013-11-14 Thread Tyler Romeo
er. > Agreed on this. PHP isn't meant for continuous processing, regardless of if you use SSE or WebSockets. Also it should be noted that SockJS also has Tornado and Twisted implementations, if you want to use Python. And, of course, if your extension needs to be scalable, they also have

Re: [Wikitech-l] Comet

2013-11-14 Thread Tyler Romeo
WebSockets are only supported in IE 10 and later, so you're still a bit screwed in terms of backwards compatibility. [1] http://www.w3.org/TR/eventsource/ [2] https://developer.mozilla.org/en-US/docs/Server-sent_events/Using_server-sent_events [3] http://caniuse.com/#feat=eventsource *-- * *T

Re: [Wikitech-l] Architectural leadership in Wikimedia's technical community

2013-11-14 Thread Tyler Romeo
that we can still implement a maintainer system without changing the RFC process. There's no requirement that RFC review and maintainers be the same people. This thread is mainly a discussion about "Architects" (or the concept thereof), and how we might want to change the MediaWiki code

[Wikitech-l] Facebook Open Academy

2013-11-13 Thread Tyler Romeo
ogram, but I'm sure people would agree it might be a good thing to become a mentor organization and have students contribute to MediaWiki as part of a college credit program. Any thoughts? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in C

Re: [Wikitech-l] Re-implementing PDF support

2013-11-13 Thread Tyler Romeo
age in Chrome > or Safari and printing to a PDF. Future plans include using bookjs or > the like to improve the rendering. > Aha awesome. Thanks for explaining. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___

Re: [Wikitech-l] Re-implementing PDF support

2013-11-13 Thread Tyler Romeo
ndering options. > I don't have anything against this, but what's the reasoning? You now have to parse the wikitext into HTML5 and then parse the HTML5 into PDF. I'm guessing you've found some library that automatically "prints" HTML5, which would make sense since b

Re: [Wikitech-l] Module storage is coming

2013-11-08 Thread Tyler Romeo
understand the reason cache manifests exist: for explicitly offline applications. If your application is not an offline application, then you should not be using cache manifests in the first place, because that's not what it's meant for. *-- * *Tyler Ro

Re: [Wikitech-l] Module storage is coming

2013-11-08 Thread Tyler Romeo
http://www.html5rocks.com/en/tutorials/appcache/beginner/ *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Module storage is coming

2013-11-03 Thread Tyler Romeo
MediaWiki: Manually fixing broken browser functionality since 2012. Also I do wonder how useful this actually is. Does site JavaScript really change that often? I suppose we'll find out after testing. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Sc

Re: [Wikitech-l] H.264

2013-11-02 Thread Tyler Romeo
On Sat, Nov 2, 2013 at 6:55 AM, Brion Vibber wrote: > If all this makes you want to just punch patents in the nose and run away, > that's understandable... > :/ it does. It really does. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Co

Re: [Wikitech-l] H.264

2013-11-02 Thread Tyler Romeo
ill serve existing H.264 videos. So if somebody uploads an MP4 to Commons, that video can be served without having to transcode it into another less efficient format. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Scie

Re: [Wikitech-l] Secure and split

2013-10-31 Thread Tyler Romeo
Yay! I've been waiting for this day and almost forgot about it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Thu, Oct 31, 2013 at 6:25 PM, Brion Vibber wrote: > Hear, hear! > > There's a cake in the office, hopefully someo

Re: [Wikitech-l] More TLS Problems

2013-10-28 Thread Tyler Romeo
Not sure what embedded systems WMF might have, but if somebody has the time they may want to double-check. You never know... *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lis

Re: [Wikitech-l] More TLS Problems

2013-10-28 Thread Tyler Romeo
to be made vulnerable. The process can be performed by anybody and only takes a day or two of processing along with an hour of computation (about $5 on EC2). *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Mon, Oct 28, 2013 at 5:04 AM, Tyler Romeo

[Wikitech-l] More TLS Problems

2013-10-28 Thread Tyler Romeo
About time another issue with TLS popped up. Thought I'd share it here: http://bit-player.org/2013/the-keys-to-the-keydom *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wik

Re: [Wikitech-l] Subclassing User?

2013-10-27 Thread Tyler Romeo
Agreed with Brion here. The User class has a large mixture of functionality and is hardcoded all over the place. There are very few use cases I can think of where it would work, and even then there's no guarantee the solution will continue to work in future versions. -- Tyler Romeo On O

Re: [Wikitech-l] Should MediaWiki CSS prefer non-free fonts?

2013-10-27 Thread Tyler Romeo
ck and dirty move to hide changes from people who subscribe to the new patchset feed. Please don't do that again in the future. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wiki

Re: [Wikitech-l] Code Climate for Ruby and JavaScript

2013-10-25 Thread Tyler Romeo
God I hate Ruby, but the JS reports look interesting, albeit it's kind of just JSHint in a nicer GUI with some cyclomatic complexity checks. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Fri, Oct 25, 2013 at 7:38 AM, Željko Filipin wrote:

Re: [Wikitech-l] RFC: Refactoring the Title object

2013-10-23 Thread Tyler Romeo
issions, etc.". I think there comes a point when you have to acknowledge that some properties of Title objects are indeed part of the value object. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ W

Re: [Wikitech-l] RFC: Refactoring the Title object

2013-10-23 Thread Tyler Romeo
itself" pattern. However, a value object needs to be easily serializable. So what representation is used for serializing a TitleValue? It can't be the display title or DB key since that's part of the TitleFormatter class. *-- * *Tyler Romeo* Stevens Institute of Te

Re: [Wikitech-l] include google api with ResourceLoader

2013-10-11 Thread Tyler Romeo
ope of what RL does. RL is made only for internal JavaScript modules that can be maintained and managed within the application. You will probably just have to use OutputPage::addScriptFile( " http://www.google.com/jsapi"; ) to do it. *-- * *Tyler Romeo* Stevens Institute of Technology, Cl

Re: [Wikitech-l] New API options problem

2013-10-10 Thread Tyler Romeo
This should probably be filed as a bug if it isn't already. -- Tyler Romeo On Oct 10, 2013 12:17 PM, "Brad Jorsch (Anomie)" wrote: > On Thu, Oct 10, 2013 at 11:13 AM, Aran wrote: > > I see, so is there any way to update user preferences such as real name > > a

Re: [Wikitech-l] Method of Testing DB Queries

2013-10-09 Thread Tyler Romeo
st wiki is pretty much useless. A smallish wiki with 10ks of pages and the full history and the table data > (not just revision/page/*links stuff from dumps) would probably be useful. > I'm not sure where the threshold roughly starts though. > OK, maybe I'll try this then. Thanks for

[Wikitech-l] Method of Testing DB Queries

2013-10-08 Thread Tyler Romeo
through which I can test queries? Thanks in advance. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Exceptions, return false/null, and other error handling possibilities.

2013-10-07 Thread Tyler Romeo
inction between return values and error values, which is something not always guaranteed by the "return null/false" strategy. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing lis

Re: [Wikitech-l] Exceptions, return false/null, and other error handling possibilities.

2013-10-07 Thread Tyler Romeo
rows an ErrorPageError, which just bypasses all logic and shows a nice error page. Usually errors that are fatal to the request, i.e., once they occur the request can no longer continue, work well with exceptions. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Maj

Re: [Wikitech-l] Escaping for field and index names

2013-10-07 Thread Tyler Romeo
> " bar' into '`foo \" bar`', but 'foo ` bar' comes out wrong as '`foo ` > bar`'. > Good point. Didn't seem to find anything on this in Bugzilla so I filed it: https://bugzilla.wikimedia.org/show_bug.cgi?id=55427 *-- * *Tyler R

Re: [Wikitech-l] Escaping for field and index names

2013-10-07 Thread Tyler Romeo
On Oct 7, 2013 11:55 AM, "Jeroen De Dauw" wrote: > > Hey, > > When constructing an SQL string, how should the following things be > escaped, if at all? > > * Field names > * Index names > > It looks like when doing a select using the Database MW thing, the field > names provided do not get escaped

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Tyler Romeo
zed, but the problem is that Antoine suggested earlier in this thread that file caching be removed completely. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikim

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Tyler Romeo
gt; a reason that almost every MediaWiki install in existence is completely out > of date. > Do you have some specific examples? Also, if that's the case then removing file caching would be a step backwards. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 20

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Tyler Romeo
g daemon. Also, like Mark mentioned, I'd like to see some statistics on how many people use shared hosting for MediaWiki before dropping support for them out of principle. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Tue, Oct 1, 2013 at 1

Re: [Wikitech-l] Conditional resource loading

2013-09-28 Thread Tyler Romeo
? > This is probably what you're looking for: https://www.mediawiki.org/wiki/ResourceLoader/Developing_with_ResourceLoader#Client-side_.28dynamically.29 There's a JavaScript function mw.loader.using() that loads modules before calling the passed closure. *-- * *Tyler Romeo* Steven

Re: [Wikitech-l] Can we help Tor users make legitimate edits?

2013-09-27 Thread Tyler Romeo
e discussion on it and maybe I can resume implementation. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] IRC meeting for RFC review

2013-09-24 Thread Tyler Romeo
:/ damn for some reason I thought this was on Thursday. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Tue, Sep 24, 2013 at 5:59 PM, Brion Vibber wrote: > Reminder to all: this is about to start. > > -- brion > > > On Sun, Se

Re: [Wikitech-l] Code reviewers registry

2013-09-24 Thread Tyler Romeo
Well sometimes a bot bump is appropriate. Sometimes I do +1 on a change with the intention of doing a further review later, but then I forget. -- Tyler Romeo On Sep 24, 2013 4:57 PM, "Antoine Musso" wrote: > Le 24/09/13 22:18, C. Scott Ananian a écrit : > > Can we get the b

Re: [Wikitech-l] IRC meeting for RFC review

2013-09-22 Thread Tyler Romeo
In case live in another timezone: http://www.timeanddate.com/worldclock/fixedtime.html?iso=20130924T22 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Sun, Sep 22, 2013 at 11:26 PM, Tim Starling wrote: > I would like to have an open IRC meet

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
gt; To be fair, both of those links redirect to the proper URL anyway. It wouldn't be hard to just change that from 404 to a redirect. Nonetheless the canonical URI should still be /wiki/Article_title. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
nk it's even necessary in the first place to get rid of the /wiki/. It doesn't look messy at all. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
be a sub-resource of the wiki itself. Even doing some sort of underscore design wouldn't make sense, because you're implying that the _images/ resource is the same level sub-resource as a normal article. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Compute

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
an article named "w/api.php". > * use simple action urls > https://en.wikipedia.org/Foo?action=history instead of > https://en.wikipedia.org/w/index.php?title=Foo&action=history > This already works. *-- * *Tyler Romeo* Stevens Institute of Technolo

Re: [Wikitech-l] Few OAuth questions

2013-09-13 Thread Tyler Romeo
count, there are definitely methods we could employ to avoid letting users give their password directly to an application. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com __

Re: [Wikitech-l] Few OAuth questions

2013-09-12 Thread Tyler Romeo
lot in an hour, but nonetheless better than persistent access). But keep in mind the user decided to trust the application in the first place. The former case is mitigated by TLS, since there really is no other way of protecting nonce secrets other than just encrypting them. *-- * *Tyle

Re: [Wikitech-l] Few OAuth questions

2013-09-12 Thread Tyler Romeo
On Thu, Sep 12, 2013 at 8:41 AM, Petr Bena wrote: > Ok, so should we ask users for password then? Is that the only > alternative in the moment? > Pretty much, unless Chris has a better recommended solution. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in

Re: [Wikitech-l] Few OAuth questions

2013-09-12 Thread Tyler Romeo
were also discussed. I forget if they got anywhere. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org ht

Re: [Wikitech-l] question about wikimedia apache module mod_pagespeed

2013-09-11 Thread Tyler Romeo
Note that Max's analysis is primarily centered around mobile and MobileFrontend. -- Tyler Romeo On Sep 11, 2013 6:15 AM, "Paul Selitskas" wrote: > Hi Luke, > > Max Semenik has already evaluated mod_pagespeed. You can see the report > here: https://www.med

Re: [Wikitech-l] how to use /ResourceLoaderGetConfigVars

2013-09-06 Thread Tyler Romeo
All of the config variables go into the global mw.config object. You should be able to use mw.config.get to retrieve them. -- Tyler Romeo On Sep 6, 2013 1:03 PM, "Yury Katkov" wrote: > Hey guys! > > This hook appears to be the proper way to pass my extension setting > v

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-04 Thread Tyler Romeo
On Tue, Sep 3, 2013 at 10:13 PM, John wrote: > Could the geoip check also disable the preference check mark? No because the geoip check is performed at the time of each request, meaning it's not stored in the database or anything. *-- * *Tyler Romeo* Stevens Institute of Technology,

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-03 Thread Tyler Romeo
On Tue, Sep 3, 2013 at 8:43 PM, Chris Steipp wrote: > Problem is (I think) we defaulted it on, so most users in China have the > preference turned on, it just doesn't effect the login process since it's > overriden by the geoip lookup. > Mhm makes sense. *-- * *Tyler Ro

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-03 Thread Tyler Romeo
have their HTTPS option turned on anyway. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://li

Re: [Wikitech-l] login Javascript?

2013-08-31 Thread Tyler Romeo
My guess is either the script does not handle redirects, and is failing when the login page tries to redirect you to HTTPS, or your script doesn't handle HTTPS, and fails when redirected to the secure page. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Com

Re: [Wikitech-l] HTTPS enabled for all logged-in users

2013-08-28 Thread Tyler Romeo
After many months of struggle, WMF takes one big step towards a more secure Wikipedia. Good job everybody! *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Wed, Aug 28, 2013 at 6:11 PM, Greg Grossmeier

[Wikitech-l] Article Concerning Error Handling

2013-08-27 Thread Tyler Romeo
n (via the Status class) except in PHP. Right now MediaWiki is a big mix of the three patterns: sometimes functions return false on error, sometimes they throw exceptions, and sometimes they return a Status object with error info. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major i

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-26 Thread Tyler Romeo
e bit of my fault. Once the merger between Extension:OATHAuth and Extension:TwoFactorAuthentication is complete, that feature will exist. See bug 53195. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech

Re: [Wikitech-l] WMFs stance on non-GPL code

2013-08-25 Thread Tyler Romeo
On Sun, Aug 25, 2013 at 8:30 PM, Brian Wolff wrote: > I'd be surprised if there was a problem with any open > source license. > Well if it's a MediaWiki extension, it has to be GPL-compatible, otherwise using it as part of MediaWiki violates the core's own GPL lice

Re: [Wikitech-l] ResourceLoader support question: how to construct a value in CSS from PHP

2013-08-25 Thread Tyler Romeo
Just for the record, the associated change with this inquiry is https://gerrit.wikimedia.org/r/55287 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Sun, Aug 25, 2013 at 12:51 PM, Krinkle wrote: >

Re: [Wikitech-l] Feedback/testing wanted: SecureLogin on test2.wikipedia.org

2013-08-24 Thread Tyler Romeo
All functionality seems to finally be working! This includes interaction with CentralAuth. Can't wait for this to be deployed Wednesday. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Sat, Aug 24,

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-24 Thread Tyler Romeo
uld something like Extension:OATHAuth fit this purpose? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org htt

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
de to *always* put logins over HTTPS, no matter what, and then direct the user to the appropriate protocol afterwards. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com __

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
ution that was just implemented. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.o

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
security, which they wouldn't exactly take kindly towards... *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimed

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
27;re going to have to choose: risk everybody's privacy or deny checkuser opportunities to people in China. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com _

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
es? > > You mean like my $wgSecureGroups approach? Because if people actually still want that I can attempt to revive that part of my patch. I think it'd be of especial interest to require HTTPS for checkusers and oversight people, due to the legal problems associated with breaches to thos

Re: [Wikitech-l] Weighted random article

2013-08-23 Thread Tyler Romeo
t; retrieved from page history. > That's pretty much accurate, at least until there becomes a way to add/change revision tags through the API. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com |

Re: [Wikitech-l] OAuth

2013-08-21 Thread Tyler Romeo
I cannot speak for MediaWiki's implementation of OAuth, but the OAuth spec does provide different authentication methods so that desktop applications can be used. It's just a matter of whether MW has it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
nto degrading the security of its entire userbase, and I don't think that's acceptable. There are 100 times as many active users on enwiki than there are zhwiki, and that's assuming *all* active users on zhwiki also edit enwiki, which is probably not true. *-- * *Tyler Romeo*

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
On Tue, Aug 20, 2013 at 2:38 PM, Chad wrote: > Did you read the patch? If $wgSecureLogin is true, prefershttps is > also true. This is core. > Oh, I didn't see that Demon had added that in. My bad. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Co

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
so I think we should all be clear. > Oh I was not aware of this. I just knew that in MW core itself the default is off. Didn't realize WMF changed it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whiz

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
will have to log in through a project that does not have secure login enabled. And once they do log in, they should be fine thereafter. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Tue, Aug 20, 2013 at

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
ned off (since the default is off anyway). *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.w

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
HTTPS. In other words, the user preference has no effect on your ability to use the site. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-19 Thread Tyler Romeo
isable login over HTTPS. Once this is deployed, *all* logins (as in absolutely all of them on whatever projects it is enabled on) will be over HTTPS. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.wh

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-19 Thread Tyler Romeo
Quick question: will the patch that was just merged regarding removing the "Stay on HTTPS" checkbox be deployed by then? Or will that be a separate deployment? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...

Re: [Wikitech-l] RFC: LESS support in MediaWiki core

2013-08-19 Thread Tyler Romeo
SS minification, and now we'd be using it for LESS compulation as well). Once this patch is merged, we'd be caching two-three copies of every static file in MediaWiki in a completely in-memory network cache. Why are we not just putting them in a file cache? *-- * *Tyler Romeo* Stevens Insti

[Wikitech-l] MediaWiki CSP

2013-08-17 Thread Tyler Romeo
in which element ids are generated is deterministic so that they match up on the page and in the CSS file. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com _

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Tyler Romeo
Also inline JavaScript, which MediaWiki has a lot of for the ResourceLoader. On Aug 17, 2013 5:10 PM, "Chris Steipp" wrote: > Inline css ( > > On Sat, Aug 17, 2013 at 2:09 PM, David Gerard wrote: > > > On 17 August 2013 22:08, Chris Steipp wrote: > > > > > A strong CSP is #3 on my most-wanted l

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Tyler Romeo
d here who knows how many people are using that service daily. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Tyler Romeo
efully. Apple devices and browsers > are still vulnerable. Aha, I indeed missed that part. Sorry about my misunderstanding. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-16 Thread Tyler Romeo
penssl and gnutls implementations). https://bugzilla.mozilla.org/show_bug.cgi?id=665814 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailin

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-16 Thread Tyler Romeo
4 (which would have consequences), I'm saying why haven't other normal ciphers been enabled? I don't foresee us doing anything like "all HTTPS for everybody" anytime in the near future. *-- * *Tyler Romeo* Stevens Institute of

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-16 Thread Tyler Romeo
be told why so we know why these changes haven't been applied yet. Can somebody from ops comment on this? Or do I have to sign up for yet another mailing list to find this out? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerr

Re: [Wikitech-l] GMail sending lots of WIkimedia mail to spam again

2013-08-14 Thread Tyler Romeo
Disregard the first point on that email. I misread the header. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Wed, Aug 14, 2013 at 3:41 PM, Tyler Romeo wrote: > I'm a little confused: > >

Re: [Wikitech-l] GMail sending lots of WIkimedia mail to spam again

2013-08-14 Thread Tyler Romeo
I'm a little confused: - Right now it appears our SPF records just say to allow everything (unless I should be checking something other than lists.wikimedia.org). - Why was the bug marked as WONTFIX if it was actually FIXED? *-- * *Tyler Romeo* Stevens Institute of Technology,

[Wikitech-l] DNSSEC Support (and maybe DANE)

2013-08-08 Thread Tyler Romeo
addition to CA verification). That is another thing we can consider. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list W

Re: [Wikitech-l] Discussions regarding archtitecture at Wikimania

2013-08-07 Thread Tyler Romeo
Unfortunately I won't be awake at 3am, but if at least a small portion of time could be spent discussing the AuthStack RFC I would be very, very happy. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com O

Re: [Wikitech-l] The Damned Commons Image Deletion Cycle

2013-08-05 Thread Tyler Romeo
On Mon, Aug 5, 2013 at 3:40 AM, Huib Laurens wrote: > Suggestion 3: Restore the file on en.wiki if it gets deleted on Commons... > No coding needed at all. > This right here. It should be trivial to just have an admin restore the deleted file. *-- * *Tyler Romeo* Stevens Ins

[Wikitech-l] Web Form Accessibility

2013-08-04 Thread Tyler Romeo
though it might be interesting. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org

Re: [Wikitech-l] VE: why editing a paragraph opens the whole page?

2013-08-03 Thread Tyler Romeo
I think we can agree that VE has some performance considerations, but if you take a look at the bug report, it's explained why it would be so incredibly difficult to implement section editing. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Sc

Re: [Wikitech-l] Is assert() allowed?

2013-07-31 Thread Tyler Romeo
gram, but generally are logically unexpected. You use assertions for things that will only break during development. It's not like the designers of C and Java just blindly put in a way to disable assertions but not exceptions. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 M

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Tyler Romeo
Also, on a side note, Facebook *just* made HTTPS the default: https://www.facebook.com/notes/facebook-engineering/secure-browsing-by-default/10151590414803920 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] Is assert() allowed?

2013-07-31 Thread Tyler Romeo
On Wed, Jul 31, 2013 at 7:28 PM, Tim Starling wrote: > The php.ini option assert.bail is 0 by default. So? It's the same way in Java. You have to turn on assertions. It's kind of natural to assume that if assertions are off the won't cause fatal errors. *-- * *Tyler Romeo* St

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Tyler Romeo
ssage when replying. I was referring to the discussion about how TLS doesn't entirely solve the problem and that we should start adding random packets in order to prevent traffic analysis. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www

Re: [Wikitech-l] (no subject)

2013-07-31 Thread Tyler Romeo
Sure thing: https://bugzilla.wikimedia.org/show_bug.cgi?id=52354 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.w

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Tyler Romeo
; HTTP/HTTPS switch in the Preferences page. We have one at the > registration/log-in page, but I'd like MediaWiki to remember that I want to > use HTTPS only. https://bugzilla.wikimedia.org/show_bug.cgi?id=52283 https://gerrit.wikimedia.org/r/47089 *-- * *Tyler Romeo* Stevens Institute

<    1   2   3   4   5   6   7   8   >