Re: [Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-04-10 Thread Cristian Consonni
Hi, sorry for the late reply to this thread. On 17/03/2018 08:24, Liam Wyatt wrote: > “we encourage you to consider tools which block unwanted third-party > scripts like the one provided by Facebook.” > - where can I go to learn more about that specifically? Here's two browser add-ons (free soft

Re: [Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-03-19 Thread Gregory Varnum
Thank you to folks that responded for your comments and questions. There are staff from multiple departments within the Wikimedia Foundation reviewing both this incident and possible improvements to prevent similar incidents in the future. Since security discussions can sometimes reveal vulnera

Re: [Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-03-17 Thread Strainu
Thank you for letting us know early on. I would also want to see a post-mortem on this and I hope the steps taken to mitigate the risk will be consistent with the ones taken on the recent fa.wiki criptocurrency case. Strainu În 17 martie 2018 03:57:28 EET, Gregory Varnum a scris: >On 14 March

Re: [Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-03-17 Thread James Salsman
https://disconnect.me works well for this with both AdBlock (which can do the same thing by itself with its advanced options) and AdBlock Plus (which can't, and is a completely different product.) On Sat, Mar 17, 2018 at 1:24 AM, Liam Wyatt wrote: > How insidious! > “we encourage you to conside

Re: [Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-03-17 Thread Liam Wyatt
How insidious! “we encourage you to consider tools which block unwanted third-party scripts like the one provided by Facebook.” - where can I go to learn more about that specifically? Thank you Greg, for having the unenviable task of being the bearer of bad news, and to all those involved in this;

Re: [Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-03-16 Thread Michael Peel
Hi Gregory, Thank you and the WMF for sharing this information so quickly after the event. It’s regrettable that this happened, but openness is the best way forward here. The WMF is being exceptional both with spotting this kind of issue so quickly and being publicly open about the fact that it

[Wikimedia-l] Notification about problem identified with a recent CentralNotice banner

2018-03-16 Thread Gregory Varnum
On 14 March and 15 March 2018, a CentralNotice banner appeared to some logged-out users viewing English Wikipedia pages. The banner contained JavaScript hosted by Facebook, which allowed Facebook to collect traffic data from those who visited a page with a banner. The banner was prepared by the