Re: [Wikitech-l] Can/should my extensions be deleted from the Wikimedia Git repository?

2018-06-07 Thread Ryan Lane
The most likely way for people to see codes of conduct is through repositories, which lets them know they have some way to combat harassment in the tool they're using to try to contribute to a particular repository. It makes sense to have a CODE_OF_CONDUCT.md in the repos; however, if all the

Re: [Wikitech-l] Reducing the environmental impact of the Wikimedia movement

2016-05-16 Thread Ryan Lane
On Mon, May 16, 2016 at 12:45 AM, Lukas Mezger wrote: > Yes, we're also looking into reducing the environmental impact of the rest > of the activities in the Wikimedia movement. And I am very aware that many > websites consume a lot more energy than Wikipedia does.

Re: [Wikitech-l] Security patch

2016-04-26 Thread Ryan Lane
On Tue, Apr 26, 2016 at 12:01 PM, Alex Monk wrote: > It's not an extension that gets bundled with MediaWiki releases. > > That doesn't mean third parties aren't using it. When I say a release of the extension, I mean give it a version number, increase the version number, tag

Re: [Wikitech-l] Security patch

2016-04-26 Thread Ryan Lane
Any chance that Wikimedia Foundation can actually do proper releases of this extension, rather than sending people a link to a phabricator page that has a link to a gerrit change buried in the comments? This seems like a pretty poor way to do a security release to third parties that may be

Re: [Wikitech-l] Feelings

2016-04-01 Thread Ryan Lane
To be totally honest, I think this is a great idea, but it should use emojis. Github added this for PRs and messages for instance, and it's amazingly helpful: https://github.com/blog/2119-add-reactions-to-pull-requests-issues-and-comments Slack has the same thing. It's fun, people like it, and

Re: [Wikitech-l] Feelings

2016-04-01 Thread Ryan Lane
/me marks this email with "anger" On Fri, Apr 1, 2016 at 1:41 PM, Ricordisamoa wrote: > This sounds like something that some random WMF team would actually > implement in the near future... > > > Il 01/04/2016 21:24, Legoktm ha scritto: > >> Hi, >> >> It's well

Re: [Wikitech-l] bluejeans

2016-03-01 Thread Ryan Lane
The right question here is: is it more important for Wikimedia foundation to use only open source than it is to focus on work that directly benefits the movement? There's no reasonable open source to do this function. The ones that exist are terrible, are less efficient, and have to have hardware

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread Ryan Lane
The best option here is: https://www.mediawiki.org/wiki/Extension:LDAP_Authentication I'm not sure why you think LDAP is a wart on Windows. Active Directory is just LDAP with Kerberos. Anyway, the LDAP Authentication extension has examples of how to do auto-auth using kerberos. You still need

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread Ryan Lane
les.GetRolesForUser().Length; > foreach (var role in Roles.GetRolesForUser()) > { > context.Response.Write('"' + role + '"'); > if (++i != count) context.Response.Write(','); > } > context.Response.Write(']'); > context.Response.End(); > } > > - Françoi

Re: [Wikitech-l] Windows Single Sign-On Extension

2016-02-09 Thread Ryan Lane
s worth sharing with the community, if others would > benefit from an LDAP-less SSO solution for MW hosted on IIS? > > -Original Message- > From: Wikitech-l [mailto:wikitech-l-boun...@lists.wikimedia.org] On > Behalf Of Ryan Lane > Sent: Tuesday, February 09, 2016 17:41 >

Re: [Wikitech-l] Peer-to-peer sharing of the content of Wikipedia through WebRTC

2015-11-30 Thread Ryan Lane
On Sun, Nov 29, 2015 at 8:18 PM, Yeongjin Jang wrote: > > I recall that I saw financial statement of WMF that states around $2.3M > was spent for Internet Hosting. I am not sure whether it includes > management cost for computing resources > (server clusters such as

Re: [Wikitech-l] [RFC/Summit] `npm install mediawiki-express`

2015-11-06 Thread Ryan Lane
On Thu, Nov 5, 2015 at 5:38 PM, C. Scott Ananian wrote: > I view it as partly an effort to counteract the perceived complexity of > running a forest full of separate services. It's fine to say they're all > preinstalled in this VM image, but that's still a lot of

Re: [Wikitech-l] [RFC/Summit] `npm install mediawiki-express`

2015-11-06 Thread Ryan Lane
On Fri, Nov 6, 2015 at 11:13 AM, C. Scott Ananian wrote: > Let's not let this discussion sidetrack into "shared hosting vs VMs (vs > docker?)" --- there's another phabricator ticket and summit topic for that > ( > https://phabricator.wikimedia.org/T87774 and >

Re: [Wikitech-l] [RFC/Summit] `npm install mediawiki-express`

2015-11-05 Thread Ryan Lane
Is this simply to support hosted providers? npm is one of the worst package managers around. This really seems like a case where thin docker images and docker-compose really shines. It's easy to handle from the packer side, it's incredibly simple from the user side, and it doesn't require

Re: [Wikitech-l] AWS usage

2015-10-08 Thread Ryan Lane
On Thu, Oct 8, 2015 at 9:13 AM, Petr Bena wrote: > As to why: > > AWS is more flexible and more reliable than wikimedia-labs, other than > that it's basically the same. If they really need to use AWS it's > probably because they don't like the restrictions that come with >

Re: [Wikitech-l] LDAP extension ownership

2015-09-21 Thread Ryan Lane
On Mon, Sep 21, 2015 at 8:41 AM, Chris Steipp wrote: > On Sep 19, 2015 11:15 AM, "bawolff" wrote: > > > > maintain is an ambiguous word. WMF has some responsibility to all the > > extensions deployed on cluster (imo). If Devunt (and any others who >

[Wikitech-l] LDAP extension ownership

2015-09-16 Thread Ryan Lane
I haven't been actively maintaining the LDAP extension for MediaWiki for over two years. There's not really much that needs to change, but some basic love and care is likely a good idea. The LDAP extension is one of the most popular MediaWiki extensions, so it wouldn't be great if it was broken

Re: [Wikitech-l] "Try the free Wikipedia app" banners

2015-09-09 Thread Ryan Lane
On Wed, Sep 9, 2015 at 7:08 AM, Adam Wight wrote: > > Another misconception or oversight I want to bring up is that Fundraising > is the team pioneering the 2/3-page or full-page banners. We're driving > readers from the website to completely closed and somewhat evil

Re: [Wikitech-l] "Try the free Wikipedia app" banners

2015-09-02 Thread Ryan Lane
On Wed, Sep 2, 2015 at 12:13 PM, Oliver Keyes wrote: > > And without any answer to my question about whether this was an actual > A/B test, and whether you're measuring overall user utility rather > than 'did they download it', this is also highly subjective and costly >

Re: [Wikitech-l] "Try the free Wikipedia app" banners

2015-09-02 Thread Ryan Lane
On Tue, Sep 1, 2015 at 10:50 PM, Gergo Tisza wrote: > On Tue, Sep 1, 2015 at 10:09 PM, Ori Livneh wrote: > > > Just in time! > > http://techcrunch.com/2015/09/01/death-to-app-install-interstitials/ > > > Interstitials are full-page ads where you have to

Re: [Wikitech-l] Wikipedia iOS app moving to GH

2015-07-22 Thread Ryan Lane
On Wed, Jul 22, 2015 at 2:14 PM, Gergo Tisza gti...@wikimedia.org wrote: GitHub is focused on small projects; for a project with lots of patches and committers it is problematic in many ways: Some of the largest open source projects around are on github:

Re: [Wikitech-l] Another reason to consider forcing https

2015-04-13 Thread Ryan Lane
On Sat, Apr 11, 2015 at 7:44 PM, Brian Wolff bawo...@gmail.com wrote: On Apr 11, 2015 1:18 PM, Pine W wiki.p...@gmail.com wrote: https://citizenlab.org/2015/04/chinas-great-cannon/ Pine ___ Wikitech-l mailing list

Re: [Wikitech-l] Starting conversion of LiquidThreads to Flow at mediawiki.org

2015-03-19 Thread Ryan Lane
On Thu, Mar 19, 2015 at 8:18 AM, Risker risker...@gmail.com wrote: The dogfooding has been happening for a while on WMF's own office-wiki. We haven't heard any results about that. Is the system being used more than the wikitext system? (i.e., are there more talk page comments now than

Re: [Wikitech-l] Starting conversion of LiquidThreads to Flow at mediawiki.org

2015-03-16 Thread Ryan Lane
On Mon, Mar 16, 2015 at 6:02 PM, Risker risker...@gmail.com wrote: How about just converting those threads back to Wikitext, instead? That script already exists, I've seen it used on Mediawiki. Will it mess up the pages that have already been converted using that script? Bottom line, it

Re: [Wikitech-l] GPL upgrading to version 3

2015-02-11 Thread Ryan Lane
On Wed, Feb 11, 2015 at 9:55 AM, Tyler Romeo tylerro...@gmail.com wrote: On February 11, 2015 at 11:49:15, Bryan Davis (bd...@wikimedia.org) wrote: On Tue, Feb 10, 2015 at 8:48 PM, Tyler Romeo tylerro...@gmail.com wrote: What is more important: allowing as many people to use our libraries as

Re: [Wikitech-l] GPL upgrading to version 3

2015-02-09 Thread Ryan Lane
On Mon, Feb 9, 2015 at 11:37 AM, Tyler Romeo tylerro...@gmail.com wrote: This entire conversation is a bit disappointing, mainly because I am a supporter of the free software movement, and like to believe that users should have a right to see the source code of software they use. Obviously

Re: [Wikitech-l] The future of shared hosting

2015-01-16 Thread Ryan Lane
On Fri, Jan 16, 2015 at 4:29 AM, David Gerard dger...@gmail.com wrote: On 16 January 2015 at 07:38, Chad innocentkil...@gmail.com wrote: These days I'm not convinced it's our job to support every possible scale of wiki install. There's several simpler and smaller wiki solutions for people

Re: [Wikitech-l] The future of shared hosting

2015-01-16 Thread Ryan Lane
On Fri, Jan 16, 2015 at 8:27 AM, David Gerard dger...@gmail.com wrote: On 16 January 2015 at 16:09, Antoine Musso hashar+...@free.fr wrote: So what we might end up with: - Wikimedia using the SOA MediaWiki with split components maintained by staff and the Wikimedia volunteers devs. Code

Re: [Wikitech-l] The future of shared hosting

2015-01-16 Thread Ryan Lane
On Fri, Jan 16, 2015 at 10:21 AM, Ryan Schmidt skizz...@gmail.com wrote: This sounds like a problem we need to fix, rather than making it worse. I'd most wikis are not up to date then we should work on making it easier to keep up to date, not making it harder. Any SOA approach is sadly DOA

Re: [Wikitech-l] The future of shared hosting

2015-01-16 Thread Ryan Lane
On Fri, Jan 16, 2015 at 1:05 PM, Brad Jorsch (Anomie) bjor...@wikimedia.org wrote: On Fri, Jan 16, 2015 at 12:27 PM, Ryan Lane rlan...@gmail.com wrote: What you're forgetting is that WMF abandoned MediaWiki as an Open Source project quite a while ago (at least 2 years ago). {{citation

Re: [Wikitech-l] The future of shared hosting

2015-01-16 Thread Ryan Lane
On Fri, Jan 16, 2015 at 1:20 PM, Erik Moeller e...@wikimedia.org wrote: I think the confusion between third party support and an open source project is unhelpful. We're obviously an open source project with lots of contributors who aren't paid (and many of them are motivated by Wikimedia's

Re: [Wikitech-l] The future of shared hosting

2015-01-16 Thread Ryan Lane
On Fri, Jan 16, 2015 at 1:23 PM, Brad Jorsch (Anomie) bjor...@wikimedia.org wrote: So this was never publicly announced and has had no visible effect, to the point that the latest version of all the code is still publicly available under a free license and volunteers are still encouraged to

Re: [Wikitech-l] [Ops] All non-api traffic is now served by HHVM

2014-12-03 Thread Ryan Lane
This is awesome! Great work everyone! On Wed, Dec 3, 2014 at 9:03 AM, Giuseppe Lavagetto glavage...@wikimedia.org wrote: Hi all, it's been quite a journey since we started working on HHVM, and last week (November 25th) HHVM was finally introduced to all users who didn't opt-in to the beta

Re: [Wikitech-l] planned move to phabricator

2014-08-24 Thread Ryan Lane
On Sun, Aug 24, 2014 at 8:06 PM, svetlana svetl...@fastmail.com.au wrote: Hi all. I am reading https://www.mediawiki.org/wiki/Phabricator/Migration and it says: A review of our project management tools [1] was started, including an assessment of our needs and requirements, and a discussion

Re: [Wikitech-l] News about stolen Internet credentials; reducing Wikimedia reliance on usernames and passwords

2014-08-07 Thread Ryan Lane
On Thu, Aug 7, 2014 at 6:58 AM, Casey Brown li...@caseybrown.org wrote: On Thu, Aug 7, 2014 at 8:10 AM, Risker risker...@gmail.com wrote: A lot of the solutions normally bandied about involve things like two-factor identification, which has the additional password coming through a

Re: [Wikitech-l] News about stolen Internet credentials; reducing Wikimedia reliance on usernames and passwords

2014-08-07 Thread Ryan Lane
On Thu, Aug 7, 2014 at 11:27 AM, Pine W wiki.p...@gmail.com wrote: There are good reasons people would target checkuser accounts, WMF staff email accounts, and other accounts that have access to lots of private info like functionary email accounts and accounts with access to restricted IRC

Re: [Wikitech-l] translatewiki.net compromised: server reinstalled

2014-07-10 Thread Ryan Lane
On Thu, Jul 10, 2014 at 10:09 AM, Siebrand Mazeland siebr...@kitano.nl wrote: This is an email to shell account holders on translatewiki.net and to wikitech-l, so that you are informed. Today at 08:10 UTC Niklas noticed that the translatewiki.net server had been compromised. We saw some

Re: [Wikitech-l] Login to Wikimedia Phabricator with a GitHub/Google/etc account?

2014-05-16 Thread Ryan Lane
On Thu, May 15, 2014 at 7:36 PM, Steven Walling steven.wall...@gmail.comwrote: On Thu, May 15, 2014 at 2:20 PM, Quim Gil q...@wikimedia.org wrote: However, Phabricator can support authentication using 3rd party providers like GitHub, Google, etc. You can get an idea at

Re: [Wikitech-l] Login to Wikimedia Phabricator with a GitHub/Google/etc account?

2014-05-15 Thread Ryan Lane
On Thu, May 15, 2014 at 5:20 PM, Quim Gil q...@wikimedia.org wrote: This is a casual request for comments about the use of 3rd party authentication providers for our future Wikimedia Phabricator instance. Wikimedia Phabricator is expected to replace Bugzilla, Gerrit and many other tools,

Re: [Wikitech-l] Affiliation in username

2014-05-09 Thread Ryan Lane
On Wed, May 7, 2014 at 1:22 PM, Jared Zimmerman jared.zimmer...@wikimedia.org wrote: Affiliations change, and user names are quite difficult to change, this sounds like something that would be good for a structured profile, not for a user name. Indeed, or in the user preferences so that it

Re: [Wikitech-l] Abandoning -1 code reviews automatically?

2014-04-14 Thread Ryan Lane
On Sun, Apr 13, 2014 at 1:37 PM, Marcin Cieslak sa...@saper.info wrote: 2) https://gerrit.wikimedia.org/r/#/c/11562/ My favourite -1 here is needs rebase. Well, obviously trivial rebases should be done automatically by the system (which OpenStack's system does), and changes that need a

Re: [Wikitech-l] wikitech downtime Tuesday, April 1st 9AM PST (16:00UTC)

2014-03-26 Thread Ryan Lane
On Wed, Mar 26, 2014 at 1:40 PM, Petr Bena benap...@gmail.com wrote: Will the new wiki be faster? Will it not log me off randomly even if I check remember me. Will it serve coffee to new users? Do you still have an issue where it logs you off randomly? That was very briefly an issue that I

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-08 Thread Ryan Lane
On Sat, Mar 8, 2014 at 1:38 PM, Tyler Romeo tylerro...@gmail.com wrote: On Fri, Mar 7, 2014 at 7:04 PM, Ryan Lane rlan...@gmail.com wrote: Yes! This is a _good_ thing. Developers should feel responsible for what they build. It's shouldn't be operation's job to make sure the site is stable

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-08 Thread Ryan Lane
On Sat, Mar 8, 2014 at 2:06 PM, Ryan Lane rlan...@gmail.com wrote: On Sat, Mar 8, 2014 at 1:38 PM, Tyler Romeo tylerro...@gmail.com wrote: On Fri, Mar 7, 2014 at 7:04 PM, Ryan Lane rlan...@gmail.com wrote: Yes! This is a _good_ thing. Developers should feel responsible for what they build

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-08 Thread Ryan Lane
On Sat, Mar 8, 2014 at 6:21 PM, Tyler Romeo tylerro...@gmail.com wrote: On Sat, Mar 8, 2014 at 8:38 PM, Marc A. Pelletier m...@uberbox.org wrote: The answer is: no, obviously not. And for that reason the MariaDB developers are not allowed to simply push their latest code on our

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-08 Thread Ryan Lane
On Sat, Mar 8, 2014 at 7:05 PM, Tyler Romeo tylerro...@gmail.com wrote: On Sat, Mar 8, 2014 at 9:48 PM, Ryan Lane rlan...@gmail.com wrote: Wikimedia uses deployment branches. Just because someone +2/merges into master doesn't mean it immediately shows up on Wikimedia servers. It needs

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-08 Thread Ryan Lane
On Sat, Mar 8, 2014 at 9:34 PM, MZMcBride z...@mzmcbride.com wrote: Chad wrote: On Mar 8, 2014 1:42 PM, Brandon Harris bhar...@wikimedia.org wrote: https://en.wikipedia.org/wiki/Badger New rule: calling badger is synonymous with asking for the moderation bit for yourself. Fine, but

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-07 Thread Ryan Lane
On Fri, Mar 7, 2014 at 2:54 PM, Tyler Romeo tylerro...@gmail.com wrote: On Fri, Mar 7, 2014 at 5:39 PM, George Herbert george.herb...@gmail.com wrote: With all due respect; hell, yes, development comes in second to operational stability. This is not disrespecting development, which is

Re: [Wikitech-l] Gerrit Commit Wars

2014-03-06 Thread Ryan Lane
On Thu, Mar 6, 2014 at 3:54 PM, Tyler Romeo tylerro...@gmail.com wrote: I think this entire thing was a big failure in basic software development and systems administration. If MobileFrontend is so tightly coupled with the desktop login form, that is a problem with MobileFrontend. In addition,

Re: [Wikitech-l] deploying the most recent MediaWiki code: which branch?

2014-02-20 Thread Ryan Lane
On Thu, Feb 20, 2014 at 1:20 PM, Sumana Harihareswara suma...@wikimedia.org wrote: Reuben Smith of wikiHow asked: We're having a hard time figuring out whether we should be basing our wikiHow code off Mediawiki's external releases (such as the latest 1.22.2), or off the branches that WMF

Re: [Wikitech-l] Drop support for PHP 5.3

2014-02-20 Thread Ryan Lane
On Thu, Feb 20, 2014 at 3:22 PM, Trevor Parscal tpars...@wikimedia.orgwrote: Is that the rule then, we have to make MediaWiki work on anything Ubuntu still supports? Is there a rule? We should strongly consider ensuring that the latest stable releases of Ubuntu and probably RHEL (or maybe

Re: [Wikitech-l] Drop support for PHP 5.3

2014-02-20 Thread Ryan Lane
On Thu, Feb 20, 2014 at 3:58 PM, James Forrester jforres...@wikimedia.orgwrote: On 20 February 2014 15:34, Ryan Lane rlan...@gmail.com wrote: On Thu, Feb 20, 2014 at 3:22 PM, Trevor Parscal tpars...@wikimedia.org wrote: Is that the rule then, we have to make MediaWiki work on anything

Re: [Wikitech-l] Faidon Liambotis promoted to Principal Operations Engineer

2014-02-10 Thread Ryan Lane
On Mon, Feb 10, 2014 at 5:48 AM, Mark Bergsma m...@wikimedia.org wrote: I'm pleased to announce that Faidon Liambotis has been promoted to Principal Operations Engineer. Definitely deserved and far too late in coming! Congrats Faidon, you do great work and you're an awesome person to work

Re: [Wikitech-l] wmf getting ready for puppet3, advice please

2014-01-28 Thread Ryan Lane
On Tue, Jan 28, 2014 at 2:41 AM, Ariel T. Glenn ar...@wikimedia.org wrote: Hi puppet wranglers, We're trying to refactor the WMF puppet manifests to get rid of reliance on dynamic scope, since puppet 3 doesn't permit it. Until now we've done what is surely pretty standard pupet 2.x

Re: [Wikitech-l] Reasonator use in Wikipedias

2014-01-21 Thread Ryan Lane
On Tue, Jan 21, 2014 at 7:17 AM, Gerard Meijssen gerard.meijs...@gmail.comwrote: Hoi, At this moment Wikipedia red links provide no information whatsoever. This is not cool. In Wikidata we often have labels for the missing (=red link) articles. We can and do provide information from

Re: [Wikitech-l] Wiki - Gerrit was Re: FWD: [Bug 58236] New: No longer allow gadgets to be turned on by default for all users on Wikimedia sites

2013-12-11 Thread Ryan Lane
On Wed, Dec 11, 2013 at 3:21 PM, Jeroen De Dauw jeroended...@gmail.comwrote: Hey, Has there been thought on how GitHub can potentially help here? I'm not sure it fits the workflow well, though can make the following observations: Unless you're implying that github writes some code for us,

Re: [Wikitech-l] Mailing list etiquette and trolling

2013-12-11 Thread Ryan Lane
On Wed, Dec 11, 2013 at 5:11 PM, Jeroen De Dauw jeroended...@gmail.comwrote: In recent months I've come across a few mails on this list that only contained accusations of trolling. Those are very much not constructive and only serve to antagonize. I know some forums that have an explicit rule

Re: [Wikitech-l] Making MediaWiki extensions installable via Composer

2013-12-08 Thread Ryan Lane
On Mon, Dec 9, 2013 at 12:06 AM, Jeroen De Dauw jeroended...@gmail.comwrote: Finding a way to separate MW the library from MW the application may be a solution to this conflict. I don't think this would be a trivial project, but it doesn't seem impossible either. That'd be fanatic if it

Re: [Wikitech-l] OpenID deployment delayed until sometime in 2014

2013-11-27 Thread Ryan Lane
On Wed, Nov 27, 2013 at 3:51 AM, Gerard Meijssen gerard.meijs...@gmail.comwrote: According to the website of myopenid [1], they are closing down Februari 1. My hope was for the Wikimedia Foundation to come to the rescue and provide a non commercial alternative to what Google and Facebook

Re: [Wikitech-l] Operations buy in on Architecture of mwlib Replacement

2013-11-14 Thread Ryan Lane
On Thu, Nov 14, 2013 at 8:13 AM, C. Scott Ananian canan...@wikimedia.orgwrote: And I'll add that there's another axis: gwicke (and others?) have been arguing for a broader collection of services architecture for mw. This would decouple some of the installability issues. Even if PDF rendering

Re: [Wikitech-l] [IRC] wm-bot semi outage

2013-10-16 Thread Ryan Lane
On Wed, Oct 16, 2013 at 1:45 AM, Petr Bena benap...@gmail.com wrote: not that it would actually worked better :P I would be most happy to switch to local /dev/vdb storage which never had any problems, but for that wm-bot would need to be on own project That's not a good idea. Performance

Re: [Wikitech-l] [IRC] wm-bot semi outage

2013-10-15 Thread Ryan Lane
On Tue, Oct 15, 2013 at 9:15 AM, Petr Bena benap...@gmail.com wrote: Hi, because of this bug: https://bugzilla.wikimedia.org/show_bug.cgi?id=55690 wm-bot is unable to write logs to file storage. Unfortunatelly since 10 minutes ago, the mysql storage broke as well, I have no idea why but I

Re: [Wikitech-l] Officially supported MediaWiki hosting service?

2013-10-02 Thread Ryan Lane
On Wed, Oct 2, 2013 at 4:50 PM, Jay Ashworth j...@baylink.com wrote: - Original Message - From: Ryan Lane rlan...@gmail.com On Wed, Oct 2, 2013 at 12:48 PM, C. Scott Ananian canan...@wikimedia.orgwrote: One intermediate position might be for WMF to distribute virtual

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Ryan Lane
On Tue, Oct 1, 2013 at 8:21 AM, Jeroen De Dauw jeroended...@gmail.comwrote: The file cache is barely maintained and I am not sure whether anyone is still relying on it. We should probably remove that feature entirely and instruct people to setup a real frontend cache instead. This

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Ryan Lane
On Tue, Oct 1, 2013 at 12:46 PM, Christopher Wilson gwsuper...@gmail.comwrote: I'm usually just an observer on these lists, but I'll weigh in as a user who runs MediaWiki on a shared host. The host *is* a VPS, but our wiki is used by the environmental department of a large international

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Ryan Lane
On Tue, Oct 1, 2013 at 1:43 PM, Tyler Romeo tylerro...@gmail.com wrote: Has anybody ever considered the possibility that maybe people don't know (or want to know) how to set up a caching proxy? One of the nice things about MediaWiki is that it's extraordinarily easy to set up. All you have to

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Ryan Lane
On Tue, Oct 1, 2013 at 2:53 PM, Tyler Romeo tylerro...@gmail.com wrote: On Tue, Oct 1, 2013 at 2:46 PM, Ryan Lane rlan...@gmail.com wrote: This is only true if you want almost no functionality of out MediaWiki and you want it to be very slow. MediaWiki is incredibly difficult to properly

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Ryan Lane
On Tue, Oct 1, 2013 at 3:00 PM, Jeroen De Dauw jeroended...@gmail.comwrote: Hey, This is only true if you want almost no functionality of out MediaWiki and you want it to be very slow. There are quite a few people running MW without a cache or other magic config and find it quite

Re: [Wikitech-l] Access from China

2013-09-23 Thread Ryan Lane
Ryu, As far as we've been told Wikipedia access to China is open, excluding a filter for specific pages, assuming you are using HTTP and not HTTPS. - Ryan On Mon, Sep 23, 2013 at 7:36 PM, Ryu Cheol rch...@gmail.com wrote: Hello all, last week I had been in Nanjing of China for my

Re: [Wikitech-l] Access from China

2013-09-23 Thread Ryan Lane
On Mon, Sep 23, 2013 at 8:07 PM, Ryu Cheol rch...@gmail.com wrote: On iPad, I could not check it is http or https. You means that on mobile devices such as iPad, it does not redirect to https. I feel a bit, it is not consistent. In the region which https is not allowed, could we keep the

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Ryan Lane
On Mon, Sep 16, 2013 at 3:12 PM, Gabriel Wicke gwi...@wikimedia.org wrote: Hi, while tinkering with a RESTful content API I was reminded of an old pet peeve of mine: The URLs we use in Wikimedia projects are relatively long and ugly. I believe that we now have the ability to clean this up if

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Ryan Lane
On Mon, Sep 16, 2013 at 4:41 PM, Gabriel Wicke gwi...@wikimedia.org wrote: On 09/16/2013 03:25 PM, Ryan Lane wrote: https://www.mediawiki.org/wiki/Manual:Short_URL#URL_like_-_example.com.2FPage_title *Warning:* this method may create an unstable URL structure and leave some page

Re: [Wikitech-l] [Labs-l] Wikimedia labs-tools

2013-09-11 Thread Ryan Lane
On Wed, Sep 11, 2013 at 8:45 AM, Magnus Manske magnusman...@googlemail.comwrote: There was a recent mail saying that Labs is not considered production stability. Mainly a disagreement about how many 9s in the 99.9% that represents. Indeed. I don't want to get into the debate about this

Re: [Wikitech-l] [Labs-l] Wikimedia labs-tools

2013-09-11 Thread Ryan Lane
On Wed, Sep 11, 2013 at 7:50 AM, John phoenixoverr...@gmail.com wrote: tools.wmflabs.org is supposed to be the replacement for the toolserver which the wmf is basically forcefully shutting down. I started the migration several months ago but got fed up with the difficulties and stopped. In

Re: [Wikitech-l] Persian Wikipedia stance on SSL

2013-09-10 Thread Ryan Lane
On Tue, Sep 10, 2013 at 10:58 AM, Amir Ladsgroup ladsgr...@gmail.comwrote: I'm not talking about right now. Right now is okay (consensuses of the community because of availability of SSL of WMF projects since August 25 in Iran) to enable SSL as default like other countries and I'm asking to

Re: [Wikitech-l] SSL security, part II.

2013-09-06 Thread Ryan Lane
On Fri, Sep 6, 2013 at 1:08 PM, C. Scott Ananian canan...@wikimedia.orgwrote: New revelations on NSA capabilities yesterday in the New York Times: see https://www.schneier.com/blog/archives/2013/09/the_nsa_is_brea.html for a jumping off point. The bottom line seems to be: 1) don't use RC4

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-03 Thread Ryan Lane
If we switch the URLs to HTTPS we'll have issues with users in China and Iran and we can't really use geoip targeting for this like we are for log-in. On Tue, Sep 3, 2013 at 5:40 AM, billinghurst billinghu...@gmail.com wrote: Now that we push/force/encourage https:// connections, are we going

Re: [Wikitech-l] WMFs stance on non-GPL code

2013-08-28 Thread Ryan Lane
On Sun, Aug 25, 2013 at 5:15 PM, Jeroen De Dauw jeroended...@gmail.comwrote: Hey, I'm curious what the stance of WMF is on BSD, MIT and MPL licensed code. In particular, could such code be deployed on WMF servers? Was this just grenade lobbing? You still haven't clarified your question,

Re: [Wikitech-l] Etherpad Lite labs instance going down in two weeks - backup time

2013-08-26 Thread Ryan Lane
On Sat, Aug 24, 2013 at 1:49 AM, Federico Leva (Nemo) nemow...@gmail.comwrote: I already have been archiving my stuff from etherpad on wiki, of course, and I've never ever used etherpad.wmflabs.org because I knew everything in Labs can die any time, but this doesn't mean that I don't worry for

Re: [Wikitech-l] WMFs stance on non-GPL code

2013-08-26 Thread Ryan Lane
On Mon, Aug 26, 2013 at 12:55 PM, Trevor Parscal tpars...@wikimedia.orgwrote: VisualEditor is MIT licensed. It was originally GPLv2 by default as per my contract with Wikimedia, but early on we got written permission from all authors to change it. We did this because we wanted to ensure

Re: [Wikitech-l] Etherpad Lite labs instance going down in two weeks - backup time

2013-08-23 Thread Ryan Lane
We don't consider etherpad archive-worthy. It's always been considered an ephemeral service and we're not willing to put any effort into to save data from it. If you care about data that you've personally hosted in it, please put it somewhere that's meant to be archived. We don't have backups for

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Ryan Lane
On Tue, Aug 20, 2013 at 8:04 PM, MZMcBride z...@mzmcbride.com wrote: Erik Moeller wrote: In general, though, I'd prefer for WMF to move away from what could be characterized as appeasement and towards actively resisting censorship and monitoring. I agree with you and I imagine most

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-19 Thread Ryan Lane
On Mon, Aug 19, 2013 at 6:03 PM, Risker risker...@gmail.com wrote: On 19 August 2013 20:35, Chad innocentkil...@gmail.com wrote: On Mon, Aug 19, 2013 at 5:32 PM, Tyler Romeo tylerro...@gmail.com wrote: Quick question: will the patch that was just merged regarding removing the Stay

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-19 Thread Ryan Lane
On Mon, Aug 19, 2013 at 6:21 PM, Risker risker...@gmail.com wrote: On 19 August 2013 21:09, Ryan Lane rlan...@gmail.com wrote: On Mon, Aug 19, 2013 at 6:03 PM, Risker risker...@gmail.com wrote: On 19 August 2013 20:35, Chad innocentkil...@gmail.com wrote: On Mon, Aug 19, 2013 at 5

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Ryan Lane
On Sat, Aug 17, 2013 at 10:13 AM, Tyler Romeo tylerro...@gmail.com wrote: On Fri, Aug 16, 2013 at 9:59 PM, C. Scott Ananian canan...@wikimedia.org wrote: Because the other TLS 1.0 ciphers are *even worse*.

Re: [Wikitech-l] trace gitblit, was: Re: Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Ryan Lane
On Sun, Aug 18, 2013 at 5:37 AM, rupert THURNER rupert.thur...@gmail.comwrote: On Sat, Aug 17, 2013 at 10:48 PM, bawolff bawolff...@gmail.com wrote: yes ken, you are right, lets stick to the issues at hand: (1) by when you will finally decide to invest the 10 minutes and properly trace the

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Ryan Lane
On Wed, Jul 31, 2013 at 1:06 PM, David Gerard dger...@gmail.com wrote: Oh - if anyone can authoritatively compose a WMF blog post on the state of the move to SSL (the move to logins and what happened there, the NSA slide, ongoing issues like browsers in China, etc), that would probably be a

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Ryan Lane
On Wed, Jul 31, 2013 at 1:39 PM, Paul Selitskas p.selits...@gmail.comwrote: Can we enable full security mode (as an optional feature) geographically based on the most concerned governments, if the whole thing isn't going fast due to lack of resources? No. That's in fact much, much harder.

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Ryan Lane
On Wednesday, July 31, 2013, Ryan Lane wrote: On Wed, Jul 31, 2013 at 1:06 PM, David Gerard dger...@gmail.comjavascript:_e({}, 'cvml', 'dger...@gmail.com'); wrote: Oh - if anyone can authoritatively compose a WMF blog post on the state of the move to SSL (the move to logins and what

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Ryan Lane
On Wed, Jul 31, 2013 at 9:28 PM, Anthony wikim...@inbox.org wrote: On Wed, Jul 31, 2013 at 5:59 PM, George Herbert george.herb...@gmail.com wrote: The second is site key security (ensuring the NSA never gets your private keys). Who theoretically has access to the private keys (and/or

Re: [Wikitech-l] no TLS 1.1 and 1.2 support

2013-07-29 Thread Ryan Lane
Seems we had the protocols listed explicitly (to disable SSL2) and TLS1.1/1.2 weren't available in the past when we were using Ubuntu 10.04. We've been on 12.04 for a while, but the protocol list wasn't updated. I'm pushing an updated config now. Thanks for letting us know! On Mon, Jul 29, 2013

Re: [Wikitech-l] no TLS 1.1 and 1.2 support

2013-07-29 Thread Ryan Lane
On Mon, Jul 29, 2013 at 11:51 AM, C. Scott Ananian canan...@wikimedia.orgwrote: That ssllabs link also shows that wikimedia has RC4 encryption enabled on SSL connections, which offers no real security. This is apparently related to the TLS 1.0 -vs- TLS 1.1/1.2 issue:

Re: [Wikitech-l] no TLS 1.1 and 1.2 support

2013-07-29 Thread Ryan Lane
On Mon, Jul 29, 2013 at 2:03 PM, Thomas Gries m...@tgries.de wrote: Am 29.07.2013 21:31, schrieb Ryan Lane: That ssllabs link also shows that wikimedia has RC4 encryption enabled on SSL connections, which offers no real security. This is apparently related to the TLS 1.0 -vs- TLS 1.1

Re: [Wikitech-l] no TLS 1.1 and 1.2 support

2013-07-29 Thread Ryan Lane
On Mon, Jul 29, 2013 at 7:34 PM, C. Scott Ananian canan...@wikimedia.orgwrote: Au contraire: I think WMF has a responsibility to ensure the safety and security of its editors, who might be working on topics controversial in their home regions. Obviously, which is why our SSL security is

Re: [Wikitech-l] Announcement: Mark y Markus leading MediaWiki Release Management

2013-07-26 Thread Ryan Lane
On Fri, Jul 26, 2013 at 8:41 AM, Greg Grossmeier g...@wikimedia.org wrote: Full announcement on the blog: http://blog.wikimedia.org/2013/07/26/future-third-party-releases-mediawiki/ Today, the Wikimedia Foundation is pleased to announce that we have contracted with two long-time members of

Re: [Wikitech-l] Unable to Create a gerrit account

2013-07-23 Thread Ryan Lane
On Mon, Jul 22, 2013 at 11:13 PM, anubhav agarwal anubhav...@gmail.comwrote: I was following this tutorial https://www.mediawiki.org/wiki/Writing_an_extension_for_deploymentfor deploying an extension on MediaWiki. It asked me to create a labs/git/gerrit account. When I opened the

Re: [Wikitech-l] MediaWiki extensions as core-like libraries: MediaWiki's fun new landmine for admins

2013-07-22 Thread Ryan Lane
On Mon, Jul 22, 2013 at 6:25 AM, Denny Vrandečić denny.vrande...@wikimedia.de wrote: I assume Ryan didn't mean to single out the Wikidata development team. Other teams have done this as well -- the Translate extension depends on ULS, CodeEditor depends on WikiEditor, Semantic Result Formats

Re: [Wikitech-l] Remove 'visualeditor-enable' from $wgHiddenPrefs

2013-07-22 Thread Ryan Lane
On Mon, Jul 22, 2013 at 7:17 PM, Tyler Romeo tylerro...@gmail.com wrote: On Mon, Jul 22, 2013 at 9:35 PM, James Forrester jforres...@wikimedia.orgwrote: It would imply that this is a preference that Wikimedia thinks is appropriate. This would be a lie. For a similar example, see the

Re: [Wikitech-l] MediaWiki extensions as core-like libraries: MediaWiki's fun new landmine for admins

2013-07-21 Thread Ryan Lane
On Sun, Jul 21, 2013 at 9:41 AM, Jeroen De Dauw jeroended...@gmail.comwrote: What started this thread was Ryan having problems with installing Wikibase. And I can see why this would not be all that smooth. The components you need is probably not the biggest hassle. After all, you just need to

Re: [Wikitech-l] MediaWiki extensions as core-like libraries: MediaWiki's fun new landmine for admins

2013-07-20 Thread Ryan Lane
On Sat, Jul 20, 2013 at 4:34 AM, Jeroen De Dauw jeroended...@gmail.comwrote: Hey, you're adding in a whole new set of incompatibilities. How so? Extensions that use any of these extension libaries now depend on the version of MediaWiki and the version of the extension. That's a new set of

  1   2   3   4   5   >