[Wikitech-l] Fwd: [Wikimedia Announcements] Annual report 2017 for MediaWiki Stakeholders' Group

2018-01-05 Thread Pine W
Forwarding to Wikitech-l and MediaWiki-l for the benefit of technical people who may be interested in this subject and not subscribed to the general WikimediaAnnounce-l. As has been the case for awhile, WikimediaAnnounce-l is not automatically forwarding to Wikimedia-l, so I'm forwarding this emai

[Wikitech-l] Testwiki2 is now moved from group0 to group1

2018-01-05 Thread Amir Sarabadani
Hello, test2wiki [0] used to be a group0 wiki, meaning it used to get new deployments at Tuesday of every week, at the same time that other test wikis get deployments. Recently, a major bug in Wikibase was introduced by yours truly [1]. It happened when changes in Wikibase repo (aka Wikidata) tran

Re: [Wikitech-l] Security question re password resets and Spectre

2018-01-05 Thread Brian Wolff
[This is kind of getting far afield of mediawiki, but...] Spectre can potentially be used to read your private (bitcoin) keys, so bitauth is just as vulnerable to it as anything else (assuming keys on your computer and not some hardware token setup). The only benefit i see is that bitauth would pro

[Wikitech-l] TechCom Radar, 2018-01-03

2018-01-05 Thread Daniel Kinzler
Hello all! Here are the minutes from this week's meeting: * Last Call for Comments: Introduce page creation log . If no pertinent issues remain unaddressed by January 17, this RFC will be approved for implementation. Patch:

Re: [Wikitech-l] Security question re password resets and Spectre

2018-01-05 Thread Dan Bolser
My favorite solution to the password problem is BitAuth2017. I believe that Spectre / Meltdown can't beat PoW, but I'm not 100% sure of the details. On 4 January 2018 at 17:29, Denny Vrandečić wrote: > I often get emails that someone is trying to get into my accounts. I guess > there are just so