Re: [Wikitech-l] RFC: Structured logging

2013-12-03 Thread Tyler Romeo
The RFC on third-party components may interest you: https://www.mediawiki.org/wiki/Requests_for_comment/Third-party_components If we use the Monolog library, which is used in Symfony and others, we can avoid having to re-implement an entire logging framework. *-- * *Tyler Romeo* Stevens

[Wikitech-l] Solution for Third-Party Dependencies

2013-11-26 Thread Tyler Romeo
, and a lot easier to use. However, this is out-of-scope for the discussion, so if you have an opinion on whether doing this is a good/bad idea, please start another thread. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Solution for Third-Party Dependencies

2013-11-26 Thread Tyler Romeo
-party components, but right now those listed seem like the main candidates (although even some of those listed would be really difficult to do and might not happen). *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Facebook Open Academy

2013-11-19 Thread Tyler Romeo
it out. Thanks in advance. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Applying nofollow only to external links added in revisions that are still unpatrolled

2013-11-18 Thread Tyler Romeo
, which seems to be the case. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] MediaWiki performance analysis

2013-11-15 Thread Tyler Romeo
with the flow? ;) *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Architectural leadership in Wikimedia's technical community

2013-11-14 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Comet

2013-11-14 Thread Tyler Romeo
*-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Comet

2013-11-14 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Re-implementing PDF support

2013-11-13 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Re-implementing PDF support

2013-11-13 Thread Tyler Romeo
and printing to a PDF. Future plans include using bookjs or the like to improve the rendering. Aha awesome. Thanks for explaining. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list

[Wikitech-l] Facebook Open Academy

2013-11-13 Thread Tyler Romeo
, but I'm sure people would agree it might be a good thing to become a mentor organization and have students contribute to MediaWiki as part of a college credit program. Any thoughts? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Module storage is coming

2013-11-08 Thread Tyler Romeo
/tutorials/appcache/beginner/ *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Module storage is coming

2013-11-08 Thread Tyler Romeo
offline applications. If your application is not an offline application, then you should not be using cache manifests in the first place, because that's not what it's meant for. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Module storage is coming

2013-11-03 Thread Tyler Romeo
MediaWiki: Manually fixing broken browser functionality since 2012. Also I do wonder how useful this actually is. Does site JavaScript really change that often? I suppose we'll find out after testing. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] H.264

2013-11-02 Thread Tyler Romeo
.264, but we can still serve existing H.264 videos. So if somebody uploads an MP4 to Commons, that video can be served without having to transcode it into another less efficient format. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] H.264

2013-11-02 Thread Tyler Romeo
On Sat, Nov 2, 2013 at 6:55 AM, Brion Vibber bvib...@wikimedia.org wrote: If all this makes you want to just punch patents in the nose and run away, that's understandable... :/ it does. It really does. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer

Re: [Wikitech-l] Secure and split

2013-10-31 Thread Tyler Romeo
Yay! I've been waiting for this day and almost forgot about it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Thu, Oct 31, 2013 at 6:25 PM, Brion Vibber bvib...@wikimedia.org wrote: Hear, hear! There's a cake in the office, hopefully someone

[Wikitech-l] More TLS Problems

2013-10-28 Thread Tyler Romeo
About time another issue with TLS popped up. Thought I'd share it here: http://bit-player.org/2013/the-keys-to-the-keydom *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech

Re: [Wikitech-l] More TLS Problems

2013-10-28 Thread Tyler Romeo
to be made vulnerable. The process can be performed by anybody and only takes a day or two of processing along with an hour of computation (about $5 on EC2). *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Mon, Oct 28, 2013 at 5:04 AM, Tyler Romeo tylerro

Re: [Wikitech-l] More TLS Problems

2013-10-28 Thread Tyler Romeo
! Not sure what embedded systems WMF might have, but if somebody has the time they may want to double-check. You never know... *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l

Re: [Wikitech-l] Should MediaWiki CSS prefer non-free fonts?

2013-10-27 Thread Tyler Romeo
people who subscribe to the new patchset feed. Please don't do that again in the future. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https

Re: [Wikitech-l] Subclassing User?

2013-10-27 Thread Tyler Romeo
Agreed with Brion here. The User class has a large mixture of functionality and is hardcoded all over the place. There are very few use cases I can think of where it would work, and even then there's no guarantee the solution will continue to work in future versions. -- Tyler Romeo On Oct 27

Re: [Wikitech-l] Code Climate for Ruby and JavaScript

2013-10-25 Thread Tyler Romeo
God I hate Ruby, but the JS reports look interesting, albeit it's kind of just JSHint in a nicer GUI with some cyclomatic complexity checks. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Fri, Oct 25, 2013 at 7:38 AM, Željko Filipin zfili

Re: [Wikitech-l] RFC: Refactoring the Title object

2013-10-23 Thread Tyler Romeo
. However, a value object needs to be easily serializable. So what representation is used for serializing a TitleValue? It can't be the display title or DB key since that's part of the TitleFormatter class. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] RFC: Refactoring the Title object

2013-10-23 Thread Tyler Romeo
, permissions, etc.. I think there comes a point when you have to acknowledge that some properties of Title objects are indeed part of the value object. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l

Re: [Wikitech-l] include google api with ResourceLoader

2013-10-11 Thread Tyler Romeo
the scope of what RL does. RL is made only for internal JavaScript modules that can be maintained and managed within the application. You will probably just have to use OutputPage::addScriptFile( http://www.google.com/jsapi; ) to do it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016

Re: [Wikitech-l] New API options problem

2013-10-10 Thread Tyler Romeo
This should probably be filed as a bug if it isn't already. -- Tyler Romeo On Oct 10, 2013 12:17 PM, Brad Jorsch (Anomie) bjor...@wikimedia.org wrote: On Thu, Oct 10, 2013 at 11:13 AM, Aran a...@organicdesign.co.nz wrote: I see, so is there any way to update user preferences such as real

Re: [Wikitech-l] Method of Testing DB Queries

2013-10-09 Thread Tyler Romeo
. A smallish wiki with 10ks of pages and the full history and the table data (not just revision/page/*links stuff from dumps) would probably be useful. I'm not sure where the threshold roughly starts though. OK, maybe I'll try this then. Thanks for the advice. *-- * *Tyler Romeo* Stevens

[Wikitech-l] Method of Testing DB Queries

2013-10-08 Thread Tyler Romeo
queries? Thanks in advance. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Escaping for field and index names

2013-10-07 Thread Tyler Romeo
On Oct 7, 2013 11:55 AM, Jeroen De Dauw jeroended...@gmail.com wrote: Hey, When constructing an SQL string, how should the following things be escaped, if at all? * Field names * Index names It looks like when doing a select using the Database MW thing, the field names provided do not

Re: [Wikitech-l] Escaping for field and index names

2013-10-07 Thread Tyler Romeo
bar' into '`foo \ bar`', but 'foo ` bar' comes out wrong as '`foo ` bar`'. Good point. Didn't seem to find anything on this in Bugzilla so I filed it: https://bugzilla.wikimedia.org/show_bug.cgi?id=55427 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Exceptions, return false/null, and other error handling possibilities.

2013-10-07 Thread Tyler Romeo
throws an ErrorPageError, which just bypasses all logic and shows a nice error page. Usually errors that are fatal to the request, i.e., once they occur the request can no longer continue, work well with exceptions. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Tyler Romeo
, like Mark mentioned, I'd like to see some statistics on how many people use shared hosting for MediaWiki before dropping support for them out of principle. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Tue, Oct 1, 2013 at 1:18 PM, Chris Steipp cste

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Tyler Romeo
a reason that almost every MediaWiki install in existence is completely out of date. Do you have some specific examples? Also, if that's the case then removing file caching would be a step backwards. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] File cache + HTTPS question

2013-10-01 Thread Tyler Romeo
is that Antoine suggested earlier in this thread that file caching be removed completely. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https

Re: [Wikitech-l] Conditional resource loading

2013-09-28 Thread Tyler Romeo
examine? This is probably what you're looking for: https://www.mediawiki.org/wiki/ResourceLoader/Developing_with_ResourceLoader#Client-side_.28dynamically.29 There's a JavaScript function mw.loader.using() that loads modules before calling the passed closure. *-- * *Tyler Romeo* Stevens Institute

Re: [Wikitech-l] Can we help Tor users make legitimate edits?

2013-09-27 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Code reviewers registry

2013-09-24 Thread Tyler Romeo
Well sometimes a bot bump is appropriate. Sometimes I do +1 on a change with the intention of doing a further review later, but then I forget. -- Tyler Romeo On Sep 24, 2013 4:57 PM, Antoine Musso hashar+...@free.fr wrote: Le 24/09/13 22:18, C. Scott Ananian a écrit : Can we get the bot

Re: [Wikitech-l] IRC meeting for RFC review

2013-09-24 Thread Tyler Romeo
:/ damn for some reason I thought this was on Thursday. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Tue, Sep 24, 2013 at 5:59 PM, Brion Vibber bvib...@wikimedia.org wrote: Reminder to all: this is about to start. -- brion On Sun, Sep 22

Re: [Wikitech-l] IRC meeting for RFC review

2013-09-22 Thread Tyler Romeo
In case live in another timezone: http://www.timeanddate.com/worldclock/fixedtime.html?iso=20130924T22 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science On Sun, Sep 22, 2013 at 11:26 PM, Tim Starling tstarl...@wikimedia.orgwrote: I would like

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
be an article named w/api.php. * use simple action urls https://en.wikipedia.org/Foo?action=history instead of https://en.wikipedia.org/w/index.php?title=Fooaction=history This already works. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
-resource of the wiki itself. Even doing some sort of underscore design wouldn't make sense, because you're implying that the _images/ resource is the same level sub-resource as a normal article. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
necessary in the first place to get rid of the /wiki/. It doesn't look messy at all. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l

Re: [Wikitech-l] [RFC]: Clean URLs- dropping /wiki/ and /w/index.php?title=..

2013-09-16 Thread Tyler Romeo
. To be fair, both of those links redirect to the proper URL anyway. It wouldn't be hard to just change that from 404 to a redirect. Nonetheless the canonical URI should still be /wiki/Article_title. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Few OAuth questions

2013-09-13 Thread Tyler Romeo
methods we could employ to avoid letting users give their password directly to an application. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list

Re: [Wikitech-l] Few OAuth questions

2013-09-12 Thread Tyler Romeo
forget if they got anywhere. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org

Re: [Wikitech-l] Few OAuth questions

2013-09-12 Thread Tyler Romeo
On Thu, Sep 12, 2013 at 8:41 AM, Petr Bena benap...@gmail.com wrote: Ok, so should we ask users for password then? Is that the only alternative in the moment? Pretty much, unless Chris has a better recommended solution. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major

Re: [Wikitech-l] Few OAuth questions

2013-09-12 Thread Tyler Romeo
decided to trust the application in the first place. The former case is mitigated by TLS, since there really is no other way of protecting nonce secrets other than just encrypting them. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com

Re: [Wikitech-l] question about wikimedia apache module mod_pagespeed

2013-09-11 Thread Tyler Romeo
Note that Max's analysis is primarily centered around mobile and MobileFrontend. -- Tyler Romeo On Sep 11, 2013 6:15 AM, Paul Selitskas p.selits...@gmail.com wrote: Hi Luke, Max Semenik has already evaluated mod_pagespeed. You can see the report here: https://www.mediawiki.org/wiki

Re: [Wikitech-l] how to use /ResourceLoaderGetConfigVars

2013-09-06 Thread Tyler Romeo
All of the config variables go into the global mw.config object. You should be able to use mw.config.get to retrieve them. -- Tyler Romeo On Sep 6, 2013 1:03 PM, Yury Katkov katkov.ju...@gmail.com wrote: Hey guys! This hook appears to be the proper way to pass my extension setting variables

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-04 Thread Tyler Romeo
On Tue, Sep 3, 2013 at 10:13 PM, John phoenixoverr...@gmail.com wrote: Could the geoip check also disable the preference check mark? No because the geoip check is performed at the time of each request, meaning it's not stored in the database or anything. *-- * *Tyler Romeo* Stevens Institute

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-03 Thread Tyler Romeo
. they will not have their HTTPS option turned on anyway. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https

Re: [Wikitech-l] Use of http:// urls in wikimedia wiki emails

2013-09-03 Thread Tyler Romeo
On Tue, Sep 3, 2013 at 8:43 PM, Chris Steipp cste...@wikimedia.org wrote: Problem is (I think) we defaulted it on, so most users in China have the preference turned on, it just doesn't effect the login process since it's overriden by the geoip lookup. Mhm makes sense. *-- * *Tyler Romeo

Re: [Wikitech-l] login Javascript?

2013-08-31 Thread Tyler Romeo
My guess is either the script does not handle redirects, and is failing when the login page tries to redirect you to HTTPS, or your script doesn't handle HTTPS, and fails when redirected to the secure page. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer

Re: [Wikitech-l] HTTPS enabled for all logged-in users

2013-08-28 Thread Tyler Romeo
After many months of struggle, WMF takes one big step towards a more secure Wikipedia. Good job everybody! *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Wed, Aug 28, 2013 at 6:11 PM, Greg Grossmeier g

[Wikitech-l] Article Concerning Error Handling

2013-08-27 Thread Tyler Romeo
the Status class) except in PHP. Right now MediaWiki is a big mix of the three patterns: sometimes functions return false on error, sometimes they throw exceptions, and sometimes they return a Status object with error info. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-26 Thread Tyler Romeo
fault. Once the merger between Extension:OATHAuth and Extension:TwoFactorAuthentication is complete, that feature will exist. See bug 53195. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] ResourceLoader support question: how to construct a value in CSS from PHP

2013-08-25 Thread Tyler Romeo
Just for the record, the associated change with this inquiry is https://gerrit.wikimedia.org/r/55287 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Sun, Aug 25, 2013 at 12:51 PM, Krinkle krinklem

Re: [Wikitech-l] WMFs stance on non-GPL code

2013-08-25 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-24 Thread Tyler Romeo
Extension:OATHAuth fit this purpose? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org

Re: [Wikitech-l] Feedback/testing wanted: SecureLogin on test2.wikipedia.org

2013-08-24 Thread Tyler Romeo
All functionality seems to finally be working! This includes interaction with CentralAuth. Can't wait for this to be deployed Wednesday. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Sat, Aug 24, 2013

Re: [Wikitech-l] Weighted random article

2013-08-23 Thread Tyler Romeo
be retrieved from page history. That's pretty much accurate, at least until there becomes a way to add/change revision tags through the API. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
want that I can attempt to revive that part of my patch. I think it'd be of especial interest to require HTTPS for checkusers and oversight people, due to the legal problems associated with breaches to those accounts. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
to people in China. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
they wouldn't exactly take kindly towards... *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
that was just implemented. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman

Re: [Wikitech-l] MediaWiki's Login Security

2013-08-23 Thread Tyler Romeo
, no matter what, and then direct the user to the appropriate protocol afterwards. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l

Re: [Wikitech-l] OAuth

2013-08-21 Thread Tyler Romeo
for MediaWiki's implementation of OAuth, but the OAuth spec does provide different authentication methods so that desktop applications can be used. It's just a matter of whether MW has it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
the site. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
the default is off anyway). *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
, they will have to log in through a project that does not have secure login enabled. And once they do log in, they should be fine thereafter. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Tue, Aug 20, 2013

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
we should all be clear. Oh I was not aware of this. I just knew that in MW core itself the default is off. Didn't realize WMF changed it. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
On Tue, Aug 20, 2013 at 2:38 PM, Chad innocentkil...@gmail.com wrote: Did you read the patch? If $wgSecureLogin is true, prefershttps is also true. This is core. Oh, I didn't see that Demon had added that in. My bad. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-20 Thread Tyler Romeo
userbase, and I don't think that's acceptable. There are 100 times as many active users on enwiki than there are zhwiki, and that's assuming *all* active users on zhwiki also edit enwiki, which is probably not true. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer

Re: [Wikitech-l] RFC: LESS support in MediaWiki core

2013-08-19 Thread Tyler Romeo
, and now we'd be using it for LESS compulation as well). Once this patch is merged, we'd be caching two-three copies of every static file in MediaWiki in a completely in-memory network cache. Why are we not just putting them in a file cache? *-- * *Tyler Romeo* Stevens Institute of Technology, Class

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-19 Thread Tyler Romeo
Quick question: will the patch that was just merged regarding removing the Stay on HTTPS checkbox be deployed by then? Or will that be a separate deployment? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] HTTPS for logged in users on Wednesday August 21st

2013-08-19 Thread Tyler Romeo
. Once this is deployed, *all* logins (as in absolutely all of them on whatever projects it is enabled on) will be over HTTPS. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Tyler Romeo
are still vulnerable. Aha, I indeed missed that part. Sorry about my misunderstanding. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-17 Thread Tyler Romeo
Also inline JavaScript, which MediaWiki has a lot of for the ResourceLoader. On Aug 17, 2013 5:10 PM, Chris Steipp cste...@wikimedia.org wrote: Inline css (div style=...) On Sat, Aug 17, 2013 at 2:09 PM, David Gerard dger...@gmail.com wrote: On 17 August 2013 22:08, Chris Steipp

[Wikitech-l] MediaWiki CSP

2013-08-17 Thread Tyler Romeo
are generated is deterministic so that they match up on the page and in the CSS file. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-16 Thread Tyler Romeo
haven't been applied yet. Can somebody from ops comment on this? Or do I have to sign up for yet another mailing list to find this out? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Fri, Aug 16, 2013 at 8:04

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-16 Thread Tyler Romeo
), I'm saying why haven't other normal ciphers been enabled? I don't foresee us doing anything like all HTTPS for everybody anytime in the near future. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] Wikimedia's anti-surveillance plans: site hardening

2013-08-16 Thread Tyler Romeo
openssl and gnutls implementations). https://bugzilla.mozilla.org/show_bug.cgi?id=665814 *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list

Re: [Wikitech-l] GMail sending lots of WIkimedia mail to spam again

2013-08-14 Thread Tyler Romeo
I'm a little confused: - Right now it appears our SPF records just say to allow everything (unless I should be checking something other than lists.wikimedia.org). - Why was the bug marked as WONTFIX if it was actually FIXED? *-- * *Tyler Romeo* Stevens Institute of Technology, Class

Re: [Wikitech-l] GMail sending lots of WIkimedia mail to spam again

2013-08-14 Thread Tyler Romeo
Disregard the first point on that email. I misread the header. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Wed, Aug 14, 2013 at 3:41 PM, Tyler Romeo tylerro...@gmail.com wrote: I'm a little

[Wikitech-l] DNSSEC Support (and maybe DANE)

2013-08-08 Thread Tyler Romeo
). That is another thing we can consider. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org

Re: [Wikitech-l] Discussions regarding archtitecture at Wikimania

2013-08-07 Thread Tyler Romeo
Unfortunately I won't be awake at 3am, but if at least a small portion of time could be spent discussing the AuthStack RFC I would be very, very happy. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Wed

Re: [Wikitech-l] The Damned Commons Image Deletion Cycle

2013-08-05 Thread Tyler Romeo
On Mon, Aug 5, 2013 at 3:40 AM, Huib Laurens sterke...@gmail.com wrote: Suggestion 3: Restore the file on en.wiki if it gets deleted on Commons... No coding needed at all. This right here. It should be trivial to just have an admin restore the deleted file. *-- * *Tyler Romeo* Stevens

[Wikitech-l] Web Form Accessibility

2013-08-04 Thread Tyler Romeo
though it might be interesting. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org

Re: [Wikitech-l] VE: why editing a paragraph opens the whole page?

2013-08-03 Thread Tyler Romeo
I think we can agree that VE has some performance considerations, but if you take a look at the bug report, it's explained why it would be so incredibly difficult to implement section editing. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science

Re: [Wikitech-l] Is assert() allowed?

2013-07-31 Thread Tyler Romeo
. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Is assert() allowed?

2013-07-31 Thread Tyler Romeo
. htmlspecialchars() can cause an XSS vulnerability if you pass it the wrong ENT_ constant. Should we just stop using htmlspecialchars() in case developers pass the wrong constant? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro

Re: [Wikitech-l] Is assert() allowed?

2013-07-31 Thread Tyler Romeo
an important functionality in being able to allow code checks that do not incur a performance penalty in a production environment. *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

[Wikitech-l] (no subject)

2013-07-31 Thread Tyler Romeo
to use it. Would there be any interest in setting up such a framework for automated security testing of MediaWiki? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Tyler Romeo
for it, but I think it was abandoned). Also, the discussion on https://bugzilla.wikimedia.org/show_bug.cgi?id=52283 is probably a blocker for enabled $wgSecureLogin (which would be a pre-requisite for either of the two above steps). *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Tyler Romeo
On Wed, Jul 31, 2013 at 2:50 PM, Chris Steipp cste...@wikimedia.org wrote: 3) Serve all traffic via HTTPS 4) With PFS and long HSTS timeouts Indeed. I need to be more optimistic. :) The bug has been fixes as part of the new SUL code. Yay! Nice! *-- * *Tyler Romeo* Stevens Institute

Re: [Wikitech-l] (no subject)

2013-07-31 Thread Tyler Romeo
integration) or when we would run these tests (I'd imagine there wouldn't be a need to run them on every change). Thoughts? *-- * *Tyler Romeo* Stevens Institute of Technology, Class of 2016 Major in Computer Science www.whizkidztech.com | tylerro...@gmail.com On Wed, Jul 31, 2013 at 2:39 PM

Re: [Wikitech-l] How's the SSL thing going?

2013-07-31 Thread Tyler Romeo
Like I've said before, the NSA spying on what users are reading is still the least of our concerns. We should focus on making sure passwords aren't sent over plaintext before attempting to evade a government-run international spy network. *-- * *Tyler Romeo* Stevens Institute of Technology, Class

<    1   2   3   4   5   6   7   8   >