Talk:Security/SOP/Access to Phabricator Security Issues

Do not require disclosing full names to the public

The create a task link associated with this procedure requires volunteers to disclose their full name to the great public. Why is that needed? Nobody really needs to know volunteers real names. If the volunteer has an NDA on file on Legalpad/with WMF legal that should be quite enough without exposing the identities of fellow volunteers. MarcoAurelio (talk) 11:29, 8 May 2018 (UTC)

The form in question does initially create a security-protected Phabricator task, though these requests are typically made public once approved. The Security Team will plan to discuss soon whether or not it should be required for a user to include their full name for these requests, or perhaps make full name an optional field. SBassett (WMF) (talk) 15:21, 14 January 2019 (UTC)

I have changed the page to no longer ask for real name/full name in the phab task. This is in response to this request and other recent requests processed. Thanks MarcoAurelio for bringing this up. We are revising a lot of this process. CPettet (WMF) (talk) 19:32, 15 January 2019 (UTC)