Re: [Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset

2020-05-12 Thread Ilana Fried 
@Jan: Hello! In February, we enabled the feature for two projects
(Wiktionary and Wikivoyage). This was because we wanted to release
incrementally and collect feedback before releasing to all wikis. This
recent update confirms that the feature has been released to all wikis and
the project is now complete. Thanks!

On Tue, May 12, 2020 at 2:57 AM Jan Ainali  wrote:

> I am a bit confused Ilana. Could you help me understand the difference from
> the February announcement?
>
>
> https://meta.wikimedia.org/w/index.php?title=Community_Tech/Password_Reset_Update&diff=19846904&oldid=19705484
>
> Med vänliga hälsningar
> Jan Ainali
>
> Den tis 12 maj 2020 kl 00:01 skrev Ilana Fried :
>
> > Hello everyone,
> >
> >
> > The Community Tech team[1] has released a new feature: Enhanced Password
> > Reset[2]. We developed this feature in response to the #3 wish[3] from
> the
> > 2019
> > Community Wishlist Survey[4]. With this feature, you can prevent password
> > reset emails from being sent unless both your username and email address
> > are provided on Special:PasswordReset. This is an optional feature,
> > available in the “Email options” section of Preferences. If you enable
> the
> > feature, you can reduce harassment through unsolicited password reset
> > emails. For more information, you can visit the Help:Password Reset
> page[5]
> > and the project page[6].
> >
> >
> > Thank you,
> >
> >
> > Ilana Fried
> >
> > Product Manager, Community Tech
> >
> >
> > [1]. https://meta.wikimedia.org/wiki/Community_Tech
> > [2].
> >
> >
> https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_password_reset_emails_that_I_didn%E2%80%99t_request._How_do_I_prevent_this_from_happening
> > ?
> > [3].
> >
> >
> https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassment/Add_an_option_to_require_email_address_and_username_to_reset_password
> > [4].
> > https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results
> > [5] https://www.mediawiki.org/wiki/Help:Reset_password
> > [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update
> > ___
> > Wikimedia-l mailing list, guidelines at:
> > https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> > https://meta.wikimedia.org/wiki/Wikimedia-l
> > New messages to: Wikimedia-l@lists.wikimedia.org
> > Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> > 
> ___
> Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> 
___
Wikimedia-l mailing list, guidelines at: 
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and 
https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,

Re: [Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset

2020-05-11 Thread Jan Ainali 
I am a bit confused Ilana. Could you help me understand the difference from
the February announcement?

https://meta.wikimedia.org/w/index.php?title=Community_Tech/Password_Reset_Update&diff=19846904&oldid=19705484

Med vänliga hälsningar
Jan Ainali

Den tis 12 maj 2020 kl 00:01 skrev Ilana Fried :

> Hello everyone,
>
>
> The Community Tech team[1] has released a new feature: Enhanced Password
> Reset[2]. We developed this feature in response to the #3 wish[3] from the
> 2019
> Community Wishlist Survey[4]. With this feature, you can prevent password
> reset emails from being sent unless both your username and email address
> are provided on Special:PasswordReset. This is an optional feature,
> available in the “Email options” section of Preferences. If you enable the
> feature, you can reduce harassment through unsolicited password reset
> emails. For more information, you can visit the Help:Password Reset page[5]
> and the project page[6].
>
>
> Thank you,
>
>
> Ilana Fried
>
> Product Manager, Community Tech
>
>
> [1]. https://meta.wikimedia.org/wiki/Community_Tech
> [2].
>
> https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_password_reset_emails_that_I_didn%E2%80%99t_request._How_do_I_prevent_this_from_happening
> ?
> [3].
>
> https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassment/Add_an_option_to_require_email_address_and_username_to_reset_password
> [4].
> https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results
> [5] https://www.mediawiki.org/wiki/Help:Reset_password
> [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update
> ___
> Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> 
___
Wikimedia-l mailing list, guidelines at: 
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and 
https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,

Re: [Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset

2020-05-11 Thread Rehman Abubakr 
This is a really useful feature, thank you.

I hope https://phabricator.wikimedia.org/T153454 would also be considered 
sometime in the near future. It's not directly related, but related to password 
security.

Tldr, if I use abc123 as my password, I would get my normal admin account. But 
if I use xyz456 I would get it to the same account, but reduced access to power 
tools (useful for public computers).



Yours truly,

Rehman<https://en.wikipedia.org/wiki/User:Rehman>


From: Wikimedia-l  on behalf of Ilana 
Fried 
Sent: 12 May 2020 03:31
To: Wikimedia Mailing List 
Subject: [Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset

Hello everyone,


The Community Tech team[1] has released a new feature: Enhanced Password
Reset[2]. We developed this feature in response to the #3 wish[3] from the 2019
Community Wishlist Survey[4]. With this feature, you can prevent password
reset emails from being sent unless both your username and email address
are provided on Special:PasswordReset. This is an optional feature,
available in the “Email options” section of Preferences. If you enable the
feature, you can reduce harassment through unsolicited password reset
emails. For more information, you can visit the Help:Password Reset page[5]
and the project page[6].


Thank you,


Ilana Fried

Product Manager, Community Tech


[1]. https://meta.wikimedia.org/wiki/Community_Tech
[2].
https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_password_reset_emails_that_I_didn%E2%80%99t_request._How_do_I_prevent_this_from_happening?
[3].
https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassment/Add_an_option_to_require_email_address_and_username_to_reset_password
[4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results
[5] https://www.mediawiki.org/wiki/Help:Reset_password
[6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update
___
Wikimedia-l mailing list, guidelines at: 
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and 
https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, 
<mailto:wikimedia-l-requ...@lists.wikimedia.org?subject=unsubscribe>
___
Wikimedia-l mailing list, guidelines at: 
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and 
https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, 
<mailto:wikimedia-l-requ...@lists.wikimedia.org?subject=unsubscribe>

Re: [Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset

2020-05-11 Thread Gnangarra 
A nice additional layer to the system, thankyou. Perhaps it may be possible
for those users with TFA activated to also make it a requirement for a
password reset requests.

On Tue, 12 May 2020 at 06:01, Ilana Fried  wrote:

> Hello everyone,
>
>
> The Community Tech team[1] has released a new feature: Enhanced Password
> Reset[2]. We developed this feature in response to the #3 wish[3] from the
> 2019
> Community Wishlist Survey[4]. With this feature, you can prevent password
> reset emails from being sent unless both your username and email address
> are provided on Special:PasswordReset. This is an optional feature,
> available in the “Email options” section of Preferences. If you enable the
> feature, you can reduce harassment through unsolicited password reset
> emails. For more information, you can visit the Help:Password Reset page[5]
> and the project page[6].
>
>
> Thank you,
>
>
> Ilana Fried
>
> Product Manager, Community Tech
>
>
> [1]. https://meta.wikimedia.org/wiki/Community_Tech
> [2].
>
> https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_password_reset_emails_that_I_didn%E2%80%99t_request._How_do_I_prevent_this_from_happening
> ?
> [3].
>
> https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassment/Add_an_option_to_require_email_address_and_username_to_reset_password
> [4].
> https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results
> [5] https://www.mediawiki.org/wiki/Help:Reset_password
> [6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update
> ___
> Wikimedia-l mailing list, guidelines at:
> https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and
> https://meta.wikimedia.org/wiki/Wikimedia-l
> New messages to: Wikimedia-l@lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,
> 



-- 
GN.

*Power of Diverse Collaboration*
*Sharing knowledge brings people together*
Wikimania Bangkok 2021
August
hosted by ESEAP

Wikimania: https://wikimania.wikimedia.org/wiki/User:Gnangarra
Noongarpedia: https://incubator.wikimedia.org/wiki/Wp/nys/Main_Page
My print shop: https://www.redbubble.com/people/Gnangarra/shop?asc=u
___
Wikimedia-l mailing list, guidelines at: 
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and 
https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,

[Wikimedia-l] New Feature from Community Tech: Enhanced Password Reset

2020-05-11 Thread Ilana Fried 
Hello everyone,


The Community Tech team[1] has released a new feature: Enhanced Password
Reset[2]. We developed this feature in response to the #3 wish[3] from the 2019
Community Wishlist Survey[4]. With this feature, you can prevent password
reset emails from being sent unless both your username and email address
are provided on Special:PasswordReset. This is an optional feature,
available in the “Email options” section of Preferences. If you enable the
feature, you can reduce harassment through unsolicited password reset
emails. For more information, you can visit the Help:Password Reset page[5]
and the project page[6].


Thank you,


Ilana Fried

Product Manager, Community Tech


[1]. https://meta.wikimedia.org/wiki/Community_Tech
[2].
https://www.mediawiki.org/wiki/Help:Reset_password#I%E2%80%99m_getting_password_reset_emails_that_I_didn%E2%80%99t_request._How_do_I_prevent_this_from_happening?
[3].
https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Anti-harassment/Add_an_option_to_require_email_address_and_username_to_reset_password
[4]. https://meta.wikimedia.org/wiki/Community_Wishlist_Survey_2019/Results
[5] https://www.mediawiki.org/wiki/Help:Reset_password
[6] https://meta.wikimedia.org/wiki/Community_Tech/Password_Reset_Update
___
Wikimedia-l mailing list, guidelines at: 
https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and 
https://meta.wikimedia.org/wiki/Wikimedia-l
New messages to: Wikimedia-l@lists.wikimedia.org
Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l,