Jump to content

Wikimedia Security Team/AppSec Clinic Minutes/2023-05-08

From mediawiki.org

Date: 2023-05-08

Attending: MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

[edit]
  1. MMartorana_(WMF)
    1. T144097 - Investigating potential patches.
    2. T332889 - Try to understand if/who owns LogFormatter?
    3. T334437 - Triaged, try to find likely maintainers.
    4. T335612 - Review and make public this Thursday?
  2. MStyles_(WMF)
    1. T323651 - Review and CR patches, prep for security deploy, work on comms.
    2. T335164 - Analysis work assigned to Maryum.
    3. T335556 - Possibly mark invalid pending status of T323651.
    4. T335755 - Waiting on manager approval.
  3. Reedy_(WMF)
    1. T333722 - Decom channel soon.
    2. T318825 - Assigned for follow-up.
    3. T321092 - Assigned for follow-up.
    4. T330086 - Done, add reporter to secteam HoF.
    5. T335204 - Assigned to Reedy_(WMF) for review.
    6. T335288 - Assigned to Reedy_(WMF) for review.
  4. SBassett_(WMF)
    1. T326871 - Waiting on AHT/Thalia response.
    2. T333140 - Update mitigations for user-rights.
    3. T334895 - In-progress.

Sent to Kelton
Sent to Privacy Engineering

  1. T336070

New Phabricator Tasks Reviewed

[edit]
  1. T335981 - MMartorana_(WMF) to grant access.
  2. T250720#8830971 - MStyles_(WMF) to review.
  3. T301181 - SBassett_(WMF) to analyze.
  4. T336027 - MStyles_(WMF) to analyze.
  5. T336113 - MMartorana_(WMF) to triage.