https://bugzilla.wikimedia.org/show_bug.cgi?id=14611
--- Comment #23 from Aryeh Gregor <[email protected]> 2009-06-29 19:50:24 UTC --- (In reply to comment #22) > Frankly I don't see why "Oh no, the public knows I'm using ImageMagick to > render my images" is such a big deal that it would be necessary to inject > userrights checks into Special:Version, which AFAIK we have never done. We're reporting the exact versions of a lot of software with this feature. If it's outdated, this could be used by attackers. A lot of people would not expect us to do it and would not want it; so we shouldn't do it by default. (As for what we haven't done before with Special:Version, just ask Domas! He used to use it for timing MediaWiki startup, but realized it eventually ended up running too much extra garbage and he had to invent [[Special:BlankPage]]. :) ) > If you don't want people to see version information don't enable the feature, > end of story. There are other ways to check what version of software you are > running than asking MediaWiki to tell you what you installed and configured. > Before this bug came around MW wouldn't even output that information, so I > don't see why you need to enable it if you don't want other people to see it. IMO it would be potentially useful to be able to have this on by default, at least for sysops. Those who wanted to display it to everyone could do so easily in any event. It's not like group permissions checks are difficult or expensive to do. > Special:Version isn't a sysadmin tool, it's a page for the general public to > see what is running. I disagree. It's mainly useful for debugging of various kinds, by users at all levels. A lot of people come into #mediawiki asking questions and don't know what version they're running, so we point them to Special:Version. More info there could be helpful (although I've never heard of someone with a problematic version of diff . . .). -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
