User:CSteipp (WMF)
 | This is the userpage of a user who was a member of the Wikimedia Foundation staff or served as a contractor to the Foundation. In order to maintain a historical record, it has not been deleted. However, any contact information given may be incorrect, as this user is no longer employed at the Foundation. |
About me
Early on in life, I fell in love with seeing the mathematics that underpin modern cryptographic systems, and a certain beauty of those systems. I studied security in school, ending with an MSc from Royal Holloway (you can blame them for Lucky 13, among other things). My thesis was on trust in anonymity networks, because it was a difficult enough problem to keep me interested. I've been working in the information security industry since. Unlike most members of the platform team, I was not involved in the community before the foundation hired me, although I've had a passion for open source and openness in security throughout my career. Working for the foundation has given me a new window into what security can look like in open and transparent organizations.
My work
Lead for the Wikimedia Security Team
Contact me
- csteipp on freenode IRC
- csteipp
wikimedia.org - For general security issues, please use securitywikimedia.org, or see Reporting security bugs
Current projects
[edit]MediaWiki security issues
[edit]- Reporting security bugs - Where to report them, what kind of information is useful, and what to expect from the WMF
- How to deploy security patches on the WMF cluster
- How to perform security fixes - slightly longer set of instructions for creating, applying, and deploying a security fix
- Release checklist - instructions for performing a release, including security releases
Other Stuff
[edit]- CSteipp (WMF)/DataFlowDiagram VE & Parsoid
- CSteipp (WMF)/Fixing security bugs
- CSteipp (WMF)/ISec Audit
- CSteipp (WMF)/OAuth Wiki-Select.js
- CSteipp (WMF)/OAuth debug client
- CSteipp (WMF)/OAuth demo client
- CSteipp (WMF)/Sandbox
- CSteipp (WMF)/ScriptTag
- CSteipp (WMF)/Secure development
- CSteipp (WMF)/SecurityProjects
- CSteipp (WMF)/SecurityRelease 1.23.7
- CSteipp (WMF)/SecurityRelease 1.24.1
- CSteipp (WMF)/Security properties
- CSteipp (WMF)/ServiceSecurity
- CSteipp (WMF)/SuperVulnerableExtension
- CSteipp (WMF)/Test
- CSteipp (WMF)/TestJS.js
- CSteipp (WMF)/TorProxy
- CSteipp (WMF)/Training
- CSteipp (WMF)/Training/VulnTagging easy
- CSteipp (WMF)/Training/VulnTagging js
- CSteipp (WMF)/Training/VulnTagging medium
- CSteipp (WMF)/VEDataflow
- CSteipp (WMF)/Vagrant to vm
- CSteipp (WMF)/XmlTest
- CSteipp (WMF)/common.js