Re: [Wikitech-l] Our CAPTCHA is very unfriendly
On Fri, 7 Nov 2014, at 16:33, Dan Garry wrote: On 6 November 2014 21:06, Tim Starling tstarl...@wikimedia.org wrote: I think it would be best if we just removed the captcha, rather than deploying a new engine. I'd absolutely love that. On the mobile app, almost everyone who tries to create an account is shown a captcha. Of those people, 31% of them get the captcha wrong on their first try, and 17% of those people give up trying to create an account. The success rate for account creation is less than 50%, in no small part due to the captcha. I'd love to eliminate giving our users that headache. Dan I would suggest to ask on a village pump and alter the configuration per local consencus. svetlana ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] Phab: [[Arcanist]]
Hi, I found that someone created https://www.mediawiki.org/wiki/Arcanist but it contains obsolete information. If you have access to phabricator and knowledge, please update this page. Most needed are now working examples of how arcanist can be used on wikimedia installation, especially review (arc diff) and landing (arc patch). I do have some knowledge, but I have no idea how wikimedia installation is configured, so I can't update it that much. Thanks ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Our CAPTCHA is very unfriendly
On 07/11/14 19:17, svetlana wrote: I would suggest to ask on a village pump and alter the configuration per local consencus. We tried that before and the answer was OMG no, even though nobody bothered to look at the logs. It turns out that the captcha we were using was broken from the outset -- trivially solvable with OCR -- but apparently that didn't affect anyone's opinion of whether or not it should be enabled. According to reports from non-WMF users of ConfirmEdit, FancyCaptcha has little effect on spam rate. See the table here for a summary: https://www.mediawiki.org/wiki/Extension:ConfirmEdit Anyway, sure, let's ask on some more village pumps. -- Tim Starling ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] [Labs-l] Announcement: Yuvi Panda joins Ops
At the same time I find it sad that he moves to the USA because he was invaluable because he was available when the other Labs people were not around. As such he provided a much needed service exactly because he lives in India. Oh that's a common misunderstanding which arises from the assumptions that Yuvi sleeps and Yuvi is human. In reality, Yuvi is always up on all time zones so everyone thinks he helps their time zone. ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] [Labs-l] Announcement: Yuvi Panda joins Ops
On 07/11/14 13:08, Dan Andreescu wrote: At the same time I find it sad that he moves to the USA because he was invaluable because he was available when the other Labs people were not around. As such he provided a much needed service exactly because he lives in India. Oh that's a common misunderstanding which arises from the assumptions that Yuvi sleeps and Yuvi is human. In reality, Yuvi is always up on all time zones so everyone thinks he helps their time zone. I can verify this. -I ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] [Labs-l] Announcement: Yuvi Panda joins Ops
Congrats Yuvi :-) On Fri, Nov 7, 2014 at 6:38 PM, Dan Andreescu dandree...@wikimedia.org wrote: At the same time I find it sad that he moves to the USA because he was invaluable because he was available when the other Labs people were not around. As such he provided a much needed service exactly because he lives in India. Oh that's a common misunderstanding which arises from the assumptions that Yuvi sleeps and Yuvi is human. In reality, Yuvi is always up on all time zones so everyone thinks he helps their time zone. ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] MediaWiki:Common.js and MediaWiki:Common.css blocked on Special:Login and Special:Preferences
On Thursday, November 6, 2014, Daniel Friesen dan...@nadir-seen-fire.com wrote: On 2014-11-06 4:45 PM, Chris Steipp wrote: On Thu, Nov 6, 2014 at 11:41 AM, Derric Atzrott datzr...@alizeepathology.com javascript:; wrote: This seems completely reasonable to me. I'd merge is personally. Is there any reason not to? It's fairly easy to inject javascript via css, so merging that patch means an admin can run javascript on the login/preferences page, while we specifically block javascript from Common.js, etc. For me, I like knowing that when I login on a random wiki in our cluster, a site admin can't have (maliciously or unintentionally) put javascript on the login page to sniff my password. I'd prefer Kunal's patch had a feature flag so we could disable this on WMF wikis, but sites with robust auditing of their common.css can enable it. I should probably take some time to remind everyone that things hiding any form of JS from single pages like the login pages makes them secure, that restrictions like those are not that hard to bypass by using JS on a non-login page to use AJAX and history.pushState to trick someone clicking the login link into thinking that they actually navigated the page and are safe from site-js, when in reality they're actually still on the same page with malicious site-js running. Very true, but the paranoid can still type in Special:UserLogin and get the correct page. A url parameter to disable site css/js would be just fine by me too... ~Daniel Friesen (Dantman, Nadir-Seen-Fire) [http://danielfriesen.name/] ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org javascript:; https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Proposed timeline for remaining Cirrus/Elastic rollout
On Thu Oct 30 2014 at 9:53:33 AM Chad innocentkil...@gmail.com wrote: All, New hardware is in place and we've got plenty of breathing room to wrap up the migration to the new search engine. The only wikis not already on it are: frwiki, zhwiki, dewiki and enwiki. We're planning to switch frwiki next Wednesday, Nov. 5th. If all goes well with that, I'd like us to do zhwiki the following Monday, Nov 10th. Then if things are still ok, let's do dewiki on Wednesday, Nov 12th. I think we'll be fine at this point and then we can talk about a proposed date for enwiki by the end of November. We're still on target for zhwiki/dewiki next week. I think we're good for enwiki the week after on Wednesday the 19th. (Going to notify WP:VPT today on enwiki, could someone please also forward this updated date to wikitech-ambassadors) -Chad ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Announcement: Yuvi Panda joins Ops
Congratulations, Yuvi! Frances On Thu, Nov 6, 2014 at 8:55 AM, Mark Bergsma m...@wikimedia.org wrote: Hi all, I'm very pleased to announce that as of this week, Yuvi Panda is part of the Wikimedia Technical Operations team, to work on our Wikimedia Labs infrastructure. Yuvi originally joined the Wikimedia Foundation Mobile team in December 2011, where he has been lead development for the original Wikipedia App and its rewrite, amongst many other projects. Besides his work in Mobile, Yuvi has been volunteering for Ops work in Wikimedia Labs for a long time now. One of the notable examples of his work is a seamlessly integrated Web proxy system that allows public web requests from the Internet to be proxied to Labs instances on private IPs without requiring public IP addresses for each instance. This very user friendly system, which he built on top of NGINX, LUA, redis, sqlite and the OpenStack API, sees a lot of usage and has dramatically reduced the need for Labs users to request (scarce) public IP address resources via a manual approval process. Another example of his work that has made a big difference is the initiation of the Labs-Vagrant project; bringing the virtues of the Mediawiki:Vagrant project to Wikimedia Labs, and allowing anyone to bring a MediaWiki development environment up in Labs with great ease. More recently Yuvi has been working on our much needed infrastructure in Labs for monitoring metrics (Graphite) and service availability (Shinken). We expect this will give us a lot more insight into the internals and availability of software and services running in Wikimedia Labs and its many projects, and we should be able to deploy it in Production as well. Of course all of this work didn't go unnoticed, and about half a year ago we've asked Yuvi if he was interested to move to Ops. With his extensive development experience and his demonstrated ability to join this with solid Ops work to create stable and highly useful solutions, we think he's a great fit for this role. Yuvi recently had his VISA application accepted, and is planning to move to San Francisco in March 2015. Until then he will be working with us remotely from India. Please join me in congratulating Yuvi! -- Lead Operations Architect Director of Technical Operations Wikimedia Foundation ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Our CAPTCHA is very unfriendly
+1 on Tim. FancyCaptcha is worse than useless. Nemo ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] (sin asunto)
tallyrodrig...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] Como recuperó mis mensajes y mis foto
tallyrodrig...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Our CAPTCHA is very unfriendly
On 11/7/14, Federico Leva (Nemo) nemow...@gmail.com wrote: +1 on Tim. FancyCaptcha is worse than useless. Nemo ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l Literally an anti-captcha. Letting bots in and keeping humans out. Its like security through obscurity, minus the obscurity bit since its been publicly talked about how weak it is for at least 3 years now - https://www.elie.net/go/p22a --bawolff ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] MediaWiki:Common.js and MediaWiki:Common.css blocked on Special:Login and Special:Preferences
On 11/6/14 4:45 PM, Chris Steipp wrote: For me, I like knowing that when I login on a random wiki in our cluster, a site admin can't have (maliciously or unintentionally) put javascript on the login page to sniff my password. I'd prefer Kunal's patch had a feature flag so we could disable this on WMF wikis, but sites with robust auditing of their common.css can enable it. I've amended https://gerrit.wikimedia.org/r/#/c/165979/3 to be controlled by a config setting. -- Legoktm ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Recent Spam on this list
On Fri Nov 07 2014 at 3:03:42 PM John phoenixoverr...@gmail.com wrote: Over the last few days I have seen a number of emails with no subject and just an email address in the content of the message. Can these please get blocked? I see one user in the last 2-3 days who's made two posts of this sort. I've unsubscribed him. If you see any others, please send a message to wikitech-l-admins. -Chad ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Our CAPTCHA is very unfriendly
Tim Starling wrote: On 07/11/14 19:17, svetlana wrote: I would suggest to ask on a village pump and alter the configuration per local consencus. We tried that before and the answer was OMG no, even though nobody bothered to look at the logs. It turns out that the captcha we were using was broken from the outset -- trivially solvable with OCR -- but apparently that didn't affect anyone's opinion of whether or not it should be enabled. According to reports from non-WMF users of ConfirmEdit, FancyCaptcha has little effect on spam rate. See the table here for a summary: https://www.mediawiki.org/wiki/Extension:ConfirmEdit Anyway, sure, let's ask on some more village pumps. I think that's unfair. Wikis have a serious spam problem. People associate CAPTCHAs with spam prevention. On the English Wikipedia, one of the actions that results in the user being required to successfully enter a CAPTCHA is adding an(y?) external link to a page as a newly registered user. This, of course, in addition to the CAPTCHA presented when registering an account (consider that many new account creations only come about as the result of the requirement for an account to make a new page on the English Wikipedia). Why not disable the extension for a week and see what happens? If you're wrong and there's a marked increase in wiki spam (account creations and edits), then you can help devise a better solution than a CAPTCHA. CAPTCHAs are clearly not a sustainable fix to the underlying problems they were implemented to address, or so I think you're saying. If you're right and the CAPTCHA is simply ineffective and unneeded, we've eliminated some code from production and we can move on. In other words: what exactly is stopping you from disabling the extension? MZMcBride ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Como recuperó mis mensajes y mis foto
I think you subscribed the wrong mailing list, please stop sending meaningless messages. Vito Inviato con AquaMail per Android http://www.aqua-mail.com Il 07 novembre 2014 23:16:58 Tally Rodriguez tallyrodrig...@gmail.com ha scritto: tallyrodrig...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] Roadmap and deployment highlights - week of November 10th
Hello and welcome to the latest edition of the WMF Engineering Roadmap and Deployment update. The full log of planned deployments next week can be found at: https://wikitech.wikimedia.org/wiki/Deployments#Week_of_November_10th A quick list of notable items... == All Week == * Fundraising tests throughout the week (on-going through the rest of the yearly fundraising) == Monday == * New Search (Cirrus) to Chinese Wikipedia ** https://www.mediawiki.org/wiki/Search == Tuesday == * MediaWiki deploy ** group1 to 1.25wmf7: All non-Wikipedia sites (Wiktionary, Wikisource, Wikinews, Wikibooks, Wikiquote, Wikiversity, and a few other sites) ** https://www.mediawiki.org/wiki/MediaWiki_1.25/wmf7 == Wednesday == * New Search (Cirrus) to German Wikipedia ** https://www.mediawiki.org/wiki/Search * MediaWiki deploy ** group2 to 1.25wmf7 (all Wikipedias) ** group0 to 1.25wmf8 (test/test2/testwikidata/mediawiki) == The Following Week == Heads up that on November 19th, new search (Cirrus) will be deployed to English Wikipedia. Thanks and as always, questions and comments welcome, Greg -- Greg Grossmeier Release Team Manager ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
[Wikitech-l] Recent Spam on this list
Over the last few days I have seen a number of emails with no subject and just an email address in the content of the message. Can these please get blocked? ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Re: [Wikitech-l] Revision metadata as a service?
On Wed, Nov 5, 2014 at 11:21 AM, Gabriel Wicke gwi...@wikimedia.org wrote: What are the indexing requirements for this metadata? If fast access by specific properties is needed Most typically, I'm guessing you'd do stuff on a per-revision basis to show quality indicators and such on page histories or article pages via opt-in gadgets. Querying the entire corpus for articles with certain characteristics would be valuable though, especially for applications like offline exports. I just saw https://meta.wikimedia.org/wiki/Grants:IEG/Revision_scoring_as_a_service and wasn't even aware of that when I wrote the email -- there's definitely a lot of interest in a generic solution for this problem. Erik -- Erik Möller VP of Product Strategy, Wikimedia Foundation ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
