Re: [Wikitech-l] Dynamic search results as category pages

2014-01-26 Thread Brian Wolff
On Jan 26, 2014 10:02 AM, "Bartosz Dziewoński" wrote: > > I have a vague feeling that a very similar proposal appeared on this very list a few months ago. (No links handy, though.) > > -- > Matma Rex > > > ___ > Wikitech-l mailing list > Wikitech-l@lists

Re: [Wikitech-l] Template transclusion on Wikimedia Commons

2014-01-29 Thread Brian Wolff
Yes that is correct. A parser cache expiry does does not update the links tables. -bawolff On Jan 29, 2014 11:03 AM, "Tuszynski, Jaroslaw W." < jaroslaw.w.tuszyn...@leidos.com> wrote: > > But I assume that is equivalent to a Purge and does not trigger update of the links tables. > > Jarek > > ---

Re: [Wikitech-l] Job queue and Redis?

2014-01-31 Thread Brian Wolff
On Jan 31, 2014 4:52 PM, "Dan Andreescu" wrote: > > > > > I'm pretty sure that WMF is using Redis for the MediaWiki job queue. I see > > some sparse documentation on setting it up. I already have redis on my > > machines and would like to move to this to make life easier on my database > > server,

Re: [Wikitech-l] How to retrieve the page, execute some time expensive operation and edit the page ONLY if it wasn't changed meanwhile

2014-02-01 Thread Brian Wolff
On Jan 31, 2014 9:59 PM, "Tyler Romeo" wrote: > > On Fri, Jan 31, 2014 at 8:38 PM, Mark Holmquist wrote: > > > http://restpatterns.org/HTTP_Headers/If-Unmodified-Since > > > > It should be passed a value that matches a Last-Modified value that we > > get from the previous "fetch page contents" API

Re: [Wikitech-l] Let's improve our password policy

2014-02-05 Thread Brian Wolff
> > I think Steven meant upping the requirements for new accounts only. In that > way nothing gets broken immediately. I'm still not absolutely convinced > this is more useful than a hindrance if we clearly inform the user about > password strength when they set them (see my earlier post about "thi

Re: [Wikitech-l] Let's improve our password policy

2014-02-06 Thread Brian Wolff
> "" ain't secure > "password" isn't secure either, and that's 8 > > It seems to me that a pretty secure approach would be to have the system > give the user his 8-12 character password, rather than letting him pick a > password. Then we can be assured that he's not doing

Re: [Wikitech-l] Let's improve our password policy

2014-02-08 Thread Brian Wolff
On 2/7/14, Steven Walling wrote: > If feel like I should reiterate why I proposed this change. Maybe no one > cares, but I think it might help convince folks this is NOT an argument for > "let's reduce user freedom in the name of security." > > I didn't worked on the RFC because I love tinkering w

Re: [Wikitech-l] RFC: Magic expressions -- Magic words in the scripting expressions

2014-02-12 Thread Brian Wolff
On Feb 12, 2014 6:28 AM, "Pavel Astakhov" wrote: > > Hi all, > > Please read and share thoughts: > https://www.mediawiki.org/wiki/Requests_for_comment/Magic_expressions > > Pavel > > ___ > Wikitech-l mailing list > Wikitech-l@lists.wikimedia.org > https:

Re: [Wikitech-l] Conflict resolution wikis

2014-02-15 Thread Brian Wolff
On Feb 15, 2014 9:05 PM, "James Salsman" wrote: > > Please see "WikiWinWin: A Wiki Based System Together with Win Win Method > for Collaborative Requirements Negotiation" by Ledan Huang, Xiaobo Wu and > Yangu Zhang (2013) > http://www.atlantis-press.com/php/download_paper.php?id=10885 > > Does som

Re: [Wikitech-l] GSoC 2014 Project

2014-02-16 Thread Brian Wolff
> > I have ideas to improve and excel interest in lay people in Gene wiki* by > including the short interesting video based learning which takes the data > from Wikimedia and create a short video which helps the people to > understand easily. I need a help to work on this.* > > In this approach I

Re: [Wikitech-l] Should MediaWiki CSS prefer non-free fonts?

2014-02-16 Thread Brian Wolff
On Feb 16, 2014 2:04 PM, "Jon Robson" wrote: > > Brad since you work for the for the foundation and seem to have a lot of > expertise in this area and seem to have been one of the more vocal > supporters of free fonts have you reached out to your work colleagues over > video conferencing or simila

Re: [Wikitech-l] Latest Snowden docs & MediaWiki

2014-02-17 Thread Brian Wolff
On 2/18/14, Philip Neustrom wrote: > The latest Snowden docs have some great screenshots of the NSA-internal > MediaWiki installation Snowden is alleged to have obtained a lot of his > material from: > > https://firstlook.org/theintercept/article/2014/02/18/snowden-docs-reveal-covert-surveillance-

Re: [Wikitech-l] Non-Violent Communication

2014-02-18 Thread Brian Wolff
On Feb 18, 2014 4:12 PM, "C. Scott Ananian" wrote: > > There are multiple readings of "Assume Good Faith". I think pi zero was > pointing out that it can be used to justify 'violent' communications. "Oh, > sure, it might seem like I just punched you in the nose, but you must AGF > and respond as

Re: [Wikitech-l] Syrian authorities censored Wikipedia access

2014-02-19 Thread Brian Wolff
On 2/19/14, Sumana Harihareswara wrote: > An analysis of Syrian internet censorship shows Wikimedia sites among the > top 10 censored domains. See Table 5 on page 6. > > The data they're analyzing is the filtering proxy logs from October 2011, > so a lot's changed in our systems since then; for in

Re: [Wikitech-l] Proposal To featured project

2014-02-21 Thread Brian Wolff
On Feb 21, 2014 11:08 AM, "Aalekh Nigam" wrote: > > Hello,I would like give a proposal for inclusion of Allow smoother and easier Wikimedia Commons pictures discovery of Bug:57805  in the Featured Project ideas Section of  https://www.mediawiki.org/wiki/Summer_of_Code_2014 Page. > Thank YouAalekh

Re: [Wikitech-l] Help: Upload without text revision - broken

2014-02-23 Thread Brian Wolff
This is happening a lot recently, see https://bugzilla.wikimedia.org/show_bug.cgi?id=32551 . 96 is an under-estimate since commons generally deletes these pages. -bawolff On Feb 23, 2014 6:10 AM, "This, that and the other" wrote: > > There are currently 96 pages on commonswiki with page_latest =

Re: [Wikitech-l] Unlicking the cookie: "ExtensionStatus" extension

2014-02-24 Thread Brian Wolff
On Feb 24, 2014 3:13 AM, "Thomas Gries" wrote: > > Am 23.02.2014 02:22, schrieb Moriel: >> >> https://github.com/mooeypoo/MediaWiki-ExtensionStatus >> >> https://www.mediawiki.org/wiki/Extension:ExtensionStatus >> ... >> >> So, does anyone want to join in and help revisit the code? >> > It appears

Re: [Wikitech-l] one framework for *all* of that

2014-02-24 Thread Brian Wolff
On Feb 25, 2014 12:55 AM, "Gryllida" wrote: > > On Tue, 25 Feb 2014, at 5:29, Mark Holmquist wrote: > > On Tue, Feb 25, 2014 at 01:35:33AM +1100, Gryllida wrote: > > > ... With this in mind I would personally encourage heavy collaboration of all teams to build a framework which lets people script

Re: [Wikitech-l] Preview of the proposal for MediaWiki Homepage

2014-02-26 Thread Brian Wolff
On 2/26/14, Quim Gil wrote: > Are there ways to show the banner and features to new visitors while > hiding them to regular visitors? > https://www.mediawiki.org/wiki/Talk:MediaWiki/Homepage_redesign/Preview#What_can_you_see_without_scrolling You would have to go a bit into the js side of things

Re: [Wikitech-l] MediaWiki Security and Maintenance Releases: 1.22.3, 1.21.6 and 1.19.12

2014-02-27 Thread Brian Wolff
> * (bug 61346) SECURITY: Make token comparison use constant time. It seems > like > our token comparison would be vulnerable to timing attacks. This will > take > constant time. Not to be a grammar nazi, but that should presumably be something along the lines of "Using constant time compariso

Re: [Wikitech-l] GSOC 2014 idea

2014-02-28 Thread Brian Wolff
On 2/28/14, Roman Zaynetdinov wrote: > Hello, I am willing to participate in GSOC this year for the first time, > but I am a little bit worried about choosing the idea, I have one and I am > not sure if it suits this program. I will be very glad if you will take a > small look at my idea and tell

Re: [Wikitech-l] GSOC 2014 idea

2014-02-28 Thread Brian Wolff
On Feb 28, 2014 12:52 PM, "Gabriel Wicke" wrote: > > The Parsoid rendering (e.g. [1]) has pretty much all semantic > information in the DOM. There might still be wiktionary-specific issues > that we don't know about yet, but tasks like extracting template > parameters or the rendering of specific

Re: [Wikitech-l] Should MediaWiki CSS prefer non-free fonts?

2014-03-03 Thread Brian Wolff
On Mar 3, 2014 4:58 PM, "Ryan Kaldari" wrote: > > Yes, we only looked at Latin fonts. We are working on an FAQ, however, that > explains how wikis that use non-Latin scripts can specify their own font > stack using MediaWiki:Vector.css. > > Ryan Kaldari > > I dont think users should be responsibl

Re: [Wikitech-l] Multimedia team architecture update

2014-03-08 Thread Brian Wolff
On Mar 9, 2014 1:35 AM, "Gerard Meijssen" wrote: > > Hoi, > Your assumption is that the metadata from Wikidata will be essentially the > same. It is not. > > Because the metadata will be essentially different, I ask for attention. At > this moment in time all the metadata is essentially English.

Re: [Wikitech-l] Review request for patches on database maintenance (Fwd: Re: GSoC Proposal : Simultaneous Modification of Multiple Pages with Semantic Forms)

2014-03-13 Thread Brian Wolff
On Mar 13, 2014 4:37 PM, "Stephan Gambke" wrote: > > Trying again with changed subject. I would really appreciate someone > reviewing the changes below. And I would appreciate it even more if this > could be done soonish. Deadline for student applications for gsoc is in a > week and if these patch

Re: [Wikitech-l] Engineering Community Team changes

2014-03-17 Thread Brian Wolff
On Mar 17, 2014 5:00 PM, "Rob Lanphier" wrote: > > Hi everyone, > > I'd like to announce some changes in the Engineering Community > Team[1]. The headlines: > * Quim Gil is taking over as the new Engineering Community Manager, > effective immediately > * Sumana Harihareswara is stepping into a n

Re: [Wikitech-l] Three GSoC projects about CAPTCHA improvements

2014-03-22 Thread Brian Wolff
On Mar 22, 2014 3:51 PM, "Quim Gil" wrote: > > We have discussed extensively the topic of CAPTCHA techniques for combating > spam. The last round of discussions came after the fact that we featured a > project related to captchas in our GSoC and OPW project ideas pages. > > See Bug 62960 - Prototy

Re: [Wikitech-l] Encoding (Localisation updates from https://translatewiki.net.)

2014-03-25 Thread Brian Wolff
On Mar 25, 2014 3:11 PM, "Jon Robson" wrote: > > Now MobileFrontend is using JSON for languages, I jumped on this to > create a script to make language addition easier - basically a command > line interface called `make message` that edits the JSONs to add an > English message and QQQ code and mai

Re: [Wikitech-l] GSoC proposal "Frontend for Vector skin CSS customizations" (Ioannis Protonotarios)

2014-03-26 Thread Brian Wolff
> > We *might* get a secondary mentor from the WMF Design team to support the > UI work and also the possibilities of CSS customization options that > MediaWiki admins might be interested about. We miss a developer familiar > with MediaWiki extension developer. I'm not an expert, but this extension

Re: [Wikitech-l] Square Bounding Boxes

2014-03-27 Thread Brian Wolff
On Mar 27, 2014 12:32 PM, "C. Scott Ananian" wrote: > > Currently mediawiki constrains image size primarily by width, which doesn't > work so well for images which are taller than they are wide. There is no > way to ask for an image which has a height equal to the "default thumbnail > size" (wit

Re: [Wikitech-l] Caching with Varnish

2014-03-28 Thread Brian Wolff
On 3/28/14, Shawn Jones wrote: > Hi, > > As part of our extension testing, we've set up varnish in accordance > with http://www.mediawiki.org/wiki/Manual:Varnish_caching > > One of the things we've noticed is that our oldid URIs are cached, > whereas Wikipedia doesn't seem to cache those pages. >

Re: [Wikitech-l] Some notes on captchas and account creation

2014-03-29 Thread Brian Wolff
> > Also, if I may ask for a wish, a special page where I could enter an IP and > free > it of all the spam filters and protections would be nice and all the > wikieducators would thank you :) > > In the past I've seen people file bugzilla requests for specific IPs to be whitelisted for specific t

Re: [Wikitech-l] Implementation JSON based localisation format for MediaWiki nearly completed

2014-04-01 Thread Brian Wolff
Cool. Thanks for all the work you put into this. > Once all migrations are complete, I'll be doing a full export from > translatewiki.net, which will cause a lot of JSON files to be touched, but > will mostly update encoding (full UTF-8) and add a newline at enf of file > where missing. > If the

Re: [Wikitech-l] Data to improve our code review queue

2014-04-03 Thread Brian Wolff
> Who knows, perhaps we should organize "patch days", in the same way that we > have organized bug days in the past (which we want to recover now). that would be cool. >We also > want to look at ways promote the oldest inactive requests. For instance, > what about directing new volunteers there,

Re: [Wikitech-l] Data to improve our code review queue

2014-04-04 Thread Brian Wolff
On Apr 4, 2014 12:48 PM, "Quim Gil" wrote: > > On Friday, April 4, 2014, Brad Jorsch (Anomie) > wrote: > > > On Thu, Apr 3, 2014 at 7:10 PM, Quim Gil > > > wrote: > > > > > The queue of open chagesets keeps growing. > > > > > > Does "open" include changesets that were submitted, got feedback, and

Re: [Wikitech-l] Code review tasks for new contributors (was Re: Data to improve our code review queue)

2014-04-04 Thread Brian Wolff
> > No, I'm not sure. Now those changesets are buried somewhere. The hypothesis > is that channeling some attention to them cannot make things worse. Perhaps > the nitpicking helps to bring back the attention of the maintainers? Ways it could make things worse: *incorrect advice given (if the newb

Re: [Wikitech-l] SpecialPage::getTitle deprecated?!

2014-04-05 Thread Brian Wolff
On Apr 5, 2014 1:09 PM, "Jeroen De Dauw" wrote: > > Hey, > > Yes. You're meant to: > > > >- write your extension for $CURRENTVERSION; > > > > So does this mean extension authors are not supposed to write extensions > compatible with multiple MediaWiki versions? > Well lots of people use separ

Re: [Wikitech-l] Code review tasks for new contributors

2014-04-05 Thread Brian Wolff
On 4/5/14, Quim Gil wrote: > Alright, let's not attempt to mix new contributors and code review, then. > Thank you for your good arguments. > > On Friday, April 4, 2014, Tim Landscheidt wrote: >> >> if the issue at hand is to review the ~ 2500 "code re- >> views waiting for reviewer", if every on

Re: [Wikitech-l] Top Level Design, LLC greedy registrar!

2014-04-06 Thread Brian Wolff
> > Who are you? The emails have from headers... > Are you a WikimediaN. Everyone responding to this thread is a Wikimedian (almost by definition). Some of the responses are from people who work for the Wikimedia Foundation (not the same thing as being a Wikimedian), however i am almost certain

Re: [Wikitech-l] Forget mailing lists and on-wiki discussions; Twitter's the place!

2014-04-06 Thread Brian Wolff
> > > > You had almost three full months to deal with the problem, and yet you are > > only responding to it when people pointed it out to you on Twitter, Reddit, > > Quora, and wherever else. > > > > /If/ you value feedback from Wikipedians, why don't you act on it? > > > > Tomasz, > > We should b

Re: [Wikitech-l] Forget mailing lists and on-wiki discussions; Twitter's the place!

2014-04-06 Thread Brian Wolff
> > You are clueless, kind sir, so let me get some things straight. Please keep things civil on list. --bawolff ___ Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l

Re: [Wikitech-l] Forget mailing lists and on-wiki discussions; Twitter's the place!

2014-04-06 Thread Brian Wolff
On 4/6/14, David Gerard wrote: > On 7 April 2014 00:16, Brian Wolff wrote: > >>> You are clueless, kind sir, so let me get some things straight. > >> Please keep things civil on list. > > > This was in response to "Or is that you're just looking for an

Re: [Wikitech-l] Free fonts and Windows users

2014-04-07 Thread Brian Wolff
> Sadly it was difficult to > distinguish whether this was simply a dislike of the new fonts or > something deeper related to a bug. Since, you're changing something primarily for aesthetic purposes (I think anyways, all the accounts of why we even would want to change the font are very hand wavey

Re: [Wikitech-l] Free fonts and Windows users

2014-04-07 Thread Brian Wolff
On 4/7/14, Steven Walling wrote: > On Mon, Apr 7, 2014 at 4:08 PM, Erwin Dokter wrote: > >> I feel that I am not being taken seriously. Three times now I have >> indicated what is wrong with this solution, namely that a single font >> stack >> cannot possibly serve a global website. >> >> I want

Re: [Wikitech-l] Free fonts and Windows users

2014-04-07 Thread Brian Wolff
> > I am going to be annoying and answer your question with a question: > consensus among who? How do make a decision like this? > > On the one hand, you have Wikimedia users, who don't really care about the > appearance of promoting FOSS or not. [Citation needed]. User's aren't one person, but qu

Re: [Wikitech-l] Free fonts and Windows users

2014-04-07 Thread Brian Wolff
On 4/7/14, Steven Walling wrote: > On Mon, Apr 7, 2014 at 5:46 PM, Brian Wolff wrote: > >> No you don't get more consistency by moving back to an experience >> where you let the browser determine fonts. However you do get a >> situation where things are more likely

Re: [Wikitech-l] Free fonts and Windows users

2014-04-08 Thread Brian Wolff
On 4/8/14, S Page wrote: > In https://gerrit.wikimedia.org/r/#/c/124475/ (go back to sans-serif) > Legoktm claims "There was a consensus that listing only non-free fonts was > not acceptable", that's not my recollection. Was a bug ever filed? > > Kaldari valiantly tried to put non-free fonts firs

Re: [Wikitech-l] Free fonts and Windows users

2014-04-08 Thread Brian Wolff
On Apr 8, 2014 12:10 PM, "Isarra Yos" wrote: > > On 08/04/14 06:57, S Page wrote: >> >> In https://gerrit.wikimedia.org/r/#/c/124475/ (go back to sans-serif) >> Legoktm claims "There was a consensus that listing only non-free fonts was >> not acceptable", that's not my recollection. Was a bug eve

Re: [Wikitech-l] Fwd: Security precaution - Resetting all user sessions today

2014-04-08 Thread Brian Wolff
Googling, I found http://heartbleed.com/ and https://www.openssl.org/news/secadv_20140407.txt gave more technical description of the issue in question, which I found interesting. Thought I'd pass the links along in case they are useful to anyone else. Anyhow, some scary stuff there. --bawolff On

Re: [Wikitech-l] Abandoning -1 code reviews automatically?

2014-04-09 Thread Brian Wolff
On Apr 9, 2014 12:08 PM, "Quim Gil" wrote: > > In relation to our discussion about code review metrics at > http://korma.wmflabs.org/browser/gerrit_review_queue.html > > I just learned that OpenStack has a policy to abandon automatically reviews > sitting in -1 during more than one week: > > https

Re: [Wikitech-l] Abandoning -1 code reviews automatically?

2014-04-09 Thread Brian Wolff
If we do do this, I think we should make it very clear to users that they can unabandon a change if they plan to fix it. Personally id like to get rid of the changesets that have been open over a year by someone who hasnt done anything mediawiki related for months and probably isnt coming back. -

Re: [Wikitech-l] Abandoning -1 code reviews automatically?

2014-04-09 Thread Brian Wolff
> > No. First of all, this would give anyone who has -1 and can > click some buttons the power to abandon changes or at least > whip a contributor into action: "Fix this /now/, or else!" > I don't think this would be a healthy atmosphere for devel- > opment. From my limited view of development at

Re: [Wikitech-l] Free fonts and Windows users

2014-04-09 Thread Brian Wolff
> > > Which gulf is growing more quickly - between the WMF staff and volunteers, > or between the veteran editing population and the typical reader? I won't > argue that there is some distance, and a degree of conflict, between the > goals and priorities of the staff and many veteran volunteers. Bu

Re: [Wikitech-l] Free fonts and Windows users

2014-04-09 Thread Brian Wolff
> And has any testing been done with screen readers and dyslexia readers to > I would be extremely surprised if this interacted negatively with screen readers. Screen readers normally dont even look at the font choice. --bawolff ___ Wikitech-l mailing l

Re: [Wikitech-l] Larger thumbnails for MediaWiki / Wikimedia wikis?

2014-04-09 Thread Brian Wolff
On Apr 9, 2014 5:43 PM, "James Forrester" wrote: > > On 9 April 2014 12:49, Brandon Harris wrote: > > > > > On Apr 9, 2014, at 12:45 PM, James Forrester > > wrote: > > > > > Proposal: > > > > > > - Make the default a nice proper size for the modern Web; I suggest > > > 360px but could be arg

Re: [Wikitech-l] Larger thumbnails for MediaWiki / Wikimedia wikis?

2014-04-09 Thread Brian Wolff
On Apr 9, 2014 10:16 PM, "James Forrester" wrote: > > On 9 April 2014 18:08, Brian Wolff wrote: > > > Of course this thread isnt supposed to be about if its a good idea to > > increase the size, so far everyone is agreement on that front. The issue > > is

Re: [Wikitech-l] Free fonts and Windows users

2014-04-10 Thread Brian Wolff
On 4/10/14, Erik Moeller wrote: > On Thu, Apr 10, 2014 at 7:39 AM, Derk-Jan Hartman > wrote: >> So for me, the question is not how can we apply pretty serif fonts to >> headers, the question is what can we do short term and long term to >> make that happen. > > It would be good if we could focus

Re: [Wikitech-l] Proposed body font stack for Latin

2014-04-15 Thread Brian Wolff
> > > According to > https://www.mediawiki.org/wiki/Typography_refresh/Font_choice#Body_font_evaluationDejaVu > sans scores 0 out of 10 points for "readability, > neutrality, and "authority" (does the font look like it conveys reliable > information)." Apparently the font is not readable, neutral o

Re: [Wikitech-l] SVG guidelines

2014-04-21 Thread Brian Wolff
On Apr 21, 2014 9:21 PM, "Lars Aronsson" wrote: > > A friend of mine, noting that Wikipedia uses SVG images > for diagrams, asked if it also had some written guidelines > for how to write the SVG source code, in particular to > express measurement values in the original units rather > than on a pi

Re: [Wikitech-l] private key compromise OCSP declarations per RFC 5280

2017-02-02 Thread Brian Wolff
On Thursday, February 2, 2017, James Salsman wrote: > Bryan Davis wrote: >> >> The HTTPS tag () >> and the Traffic component >> () would both >>seem reasonable. > > Thanks Brian, will d

Re: [Wikitech-l] Filesystem directory structure for Mediawiki files

2017-03-26 Thread Brian Wolff
You cant just copy files, the db records need to be added to. You should use tge importImages.php maintenance script which will copy them over and create db records. The directory structure is md5 of the filename but you should not create that yourself. Note there can be security implications of

Re: [Wikitech-l] CDN for Wikimedia code

2017-04-07 Thread Brian Wolff
On Friday, April 7, 2017, Felipe Schenone wrote: > Hi all! I'm the main developer of the ProveIt gadget > , a reference > manager for Wikipedia. The code is tracked via Phabricator, reviewed via > Gerrit, and served to the various Wikipedias

Re: [Wikitech-l] CDN for Wikimedia code

2017-04-07 Thread Brian Wolff
the extension need to be > installed on each Wikipedia for the module to be available? > > On Fri, Apr 7, 2017 at 4:12 PM Chico Venancio > wrote: > >> Brian, >> No, and I always felt there was a better way to do this. I'll look into >> that, thanks, >> >&

[Wikitech-l] SyntaxHighlight_GeSHi in latest tarball does not include security fixes

2017-04-29 Thread Brian Wolff
Hello everyone. Unfortunately there's been a mistake in generating the 1.28.1 and 1.27.2 tarball releases, where the wrong version of SyntaxHighlight_GeSHi extension was included. The version of this extension that was included has publically known severe security issues in it. Until such a time

Re: [Wikitech-l] [MediaWiki-announce] Security release 1.27.3 and 1.28.2

2017-04-30 Thread Brian Wolff
Oh did we rename it. It applies to the new syntaxhighlight 2.0 -- Bawolff On Sunday, April 30, 2017, David Gerard wrote: > Does this apply only specifically to the old thing called > SyntaxHighlight_GeSHi , or also to the current thing called > SyntaxHighlight that my MW 1.27.2 shows as SyntaxHi

Re: [Wikitech-l] Historical use of latin1 fields in MySQL

2017-05-02 Thread Brian Wolff
. > > On the latest discussions, there are proposals to increase the minimum > mediawiki requirements to MySQL/MariaDB 5.5 and allow binary or utf8mb4 > (not utf8, 3 byte utf8), https://phabricator.wikimedia.org/T161232. Utf8mb4 > should be enough for most uses (utf8 will not allow for emojis, for

Re: [Wikitech-l] Chinese conversion, search engines, and auto-detection

2017-05-17 Thread Brian Wolff
I think the point of all those tags was so google linked to right variant, but i am unsure. -- brian On Wednesday, May 17, 2017, Amir E. Aharoni wrote: > Hi, > > I wondered about some things around the Chinese variant conversion: > > * When a person uses a search engine, do the links in the res

Re: [Wikitech-l] Chinese conversion, search engines, and auto-detection

2017-05-17 Thread Brian Wolff
gt; ‪“We're living in pieces, > I want to live in peace.” – T. Moore‬ > > 2017-05-17 23:25 GMT+03:00 Brian Wolff : > >> I think the point of all those tags was >> so google linked to right variant, but i am unsure. >> >> -- >> brian >> >

Re: [Wikitech-l] use of @inheritdoc

2017-05-18 Thread Brian Wolff
On Thursdy, May 18, 2017, Stas Malyshev wrote: > Hi! > >> What are people's opinions on using it? > > I think it's OK to use it in relevant cases (along with already existing > and used @see) and recognize such uses as documented, but making it > mandatory would look like increasing busywork for a

[Wikitech-l] Security announcement for CentralAuth extension

2017-07-18 Thread Brian Wolff
L1_27: 4db90e20808f (Now requires at least 1.27.2) Associated bug: https://phabricator.wikimedia.org/T134931 Sincerely, Brian Wolff Wikimedia Security Team -BEGIN PGP SIGNATURE- iQIcBAEBCAAGBQJZbudjAAoJEDYflDsVwI3Ux1AQAJXV2pcQicZzApo+WUbqD5aS 5GSEmNlLsS5E16r/tYU2Fhih

[Wikitech-l] [Mildly offtopic] 10 year anniversary of logging #mediawiki irc channel

2017-07-19 Thread Brian Wolff
Ten years ago today, we started logging the #mediawiki channel July 19, 2007: [05:47:31] You're now being logged -- http://tools.wikimedia.org/~amidaniel/chanlogs/%23mediawiki/ http://bots.wmflabs.org/~wm-bot/logs/%23mediawiki/20070719.txt The channel (presumably) existed way before that, but

Re: [Wikitech-l] Last Call: ArchCom/TechCom Charter

2017-07-28 Thread Brian Wolff
Volunteers are subject to all sorts of processes they dont (directly) consent to. Sure they could walk away if they dont like a process, just like staff can quit if they dont like something, but thats rarely a real option. On Friday, July 28, 2017, Daniel Kinzler wrote: > Hi Nemo! > > Thanks fo

[Wikitech-l] meeting of the mediawiki farmers user group at wikimania (6:30 saturday)

2017-08-11 Thread Brian Wolff
There will be a meeting of the mediawiki farmers group at wikimania in ballroom west at 6:30 on saturday. This is a user group which aims to improve the experiance for using mediawiki in wikifarms. Anyone interested in developing new wikifarm orientied features, uses mediawiki in a farm setting or

Re: [Wikitech-l] Last Call: PostgreSQL schema change for consistency with MySQL

2017-08-17 Thread Brian Wolff
Does it actually make sense to notify third parties using postgres about the change? Its not like we are dropping support for it, and im doubtful that random user using postgres with mediawiki has opinions on implementation details such as what specific features are used in the schema or would even

Re: [Wikitech-l] Logs are down

2017-09-10 Thread Brian Wolff
Just posting because originally i thought you meant special:log on wiki which sounded really bad. To avoid confusion this is actually about high replication (around a day) on tool labs. -- briam On Sunday, September 10, 2017, יגאל חיטרון wrote: > Hi. It looks wrong, at least for me, and it will

Re: [Wikitech-l] How to add custom styles to a page?

2017-09-16 Thread Brian Wolff
Im assuming here that you cannot just edit mediawiki:common.css What you are looking for is TemplateStyles. This is not enabled on english wikipedia yet, but should be coming there soon (I think). It would allow you to use @media styles for your pages. See https://www.mediawiki.org/wiki/Help:Temp

Re: [Wikitech-l] HHVM vs. Zend divergence

2017-09-18 Thread Brian Wolff
On Monday, September 18, 2017, Max Semenik wrote: > Today, the HHVM developers made an announcement[1] that they have plans of > ceasing to maintain 100% PHP7 compatibility and concentrating on Hack > instead. > > While this does not mean that we need to take an action immediately, > eventually we

Re: [Wikitech-l] HHVM vs. Zend divergence

2017-09-19 Thread Brian Wolff
On Tuesday, September 19, 2017, C. Scott Ananian wrote: > On Tue, Sep 19, 2017 at 1:17 PM, Chad wrote: > >> be clear: we never chose HHVM for Hack. We don't use Hack. The one >> experiment I had at trying Hack never panned out. MediaWiki is in PHP, not >> Hack. >> > > To be super clear: MediaWiki

Re: [Wikitech-l] Previous mediawiki version test wiki

2017-09-21 Thread Brian Wolff
On Thursday, September 21, 2017, יגאל חיטרון wrote: > Hi. Sometimes after the week deployment I need to compare the new version > with the previous one, in some aspect. Is there a test wiki that always has > one version before the current? > Thank you. > Igal (User:IKhitron) >

Re: [Wikitech-l] Previous mediawiki version test wiki

2017-09-21 Thread Brian Wolff
can be very helpful? > Igal > > On Sep 21, 2017 22:12, "Brian Wolff" wrote: > >> On Thursday, September 21, 2017, יגאל חיטרון >> wrote: >> > Hi. Sometimes after the week deployment I need to compare the new version >> > with the previous on

Re: [Wikitech-l] Be bold with code changes

2017-09-21 Thread Brian Wolff
Code review latency is a complicated issue which a lot has been said about. It was a subject of a session at the last 2 dev summits (im not sure if the last one was recorded, but there is definitely a video of the session from the dev summit two years ago, on commons). It was an issue i used to car

Re: [Wikitech-l] Writing unit tests for extensions that use dbr calls

2017-09-27 Thread Brian Wolff
Try adding $this->tablesUsed[] = 'cacao_annotation'; To the setUp() method of your tests -- brian On Wednesday, September 27, 2017, Jim Hu wrote: > I’m trying to improve my coding practices for our MW extensions, and I’m very confused by whether my problem with PHPUnit is a problem with the te

Re: [Wikitech-l] Person of interest to blame

2017-10-03 Thread Brian Wolff
Realistically its probably in the enhancedChanges list base class somewhere and not watchlist itself. -- bawolff On Tuesday, October 3, 2017, C. Scott Ananian wrote: > git log includes/specials/SpecialWatchlist.php suggests: > > T172757 / I27bdaa1401323fa3143f79a57dc5b9773e48fd1d (sep 27) > T176

Re: [Wikitech-l] [Wmfall] New Developers Quarterly Report's first edition

2017-10-18 Thread Brian Wolff
On Tue, Oct 17, 2017 at 7:03 PM, Srishti Sethi wrote: > Hello everyone, > > > I would like to share the first edition of the New Developers Quarterly > Report that the Developer Relations team has produced. This report covers > metrics, survey analysis and lessons learned from new developers focus

Re: [Wikitech-l] Roadmap for continued compatibility with MySQL

2017-10-19 Thread Brian Wolff
On Thursday, October 19, 2017, Hogan, Michael C wrote: > How many years into the future is it reasonable to expect that MySQL will remain a recommended database server for "production use" along with MariaDB now that the Foundation has switched to using MariaDB internally? I know that MariaDB clai

Re: [Wikitech-l] PHPUnit error: Cannot access the database: Unknown database

2017-10-25 Thread Brian Wolff
Try passing --wiki wiki As a command line argument to the script. (Assuming wiki is the db name. Otherwise pass --wiki dbname_here ) -- bawolff On Wednesday, October 25, 2017, Sebastian Berlin < sebastian.ber...@wikimedia.se> wrote: > I'm having trouble running PHPUnit for the extension I'm dev

Re: [Wikitech-l] Security release: 1.29.2 / 1.28.3 / 1.27.4

2017-11-15 Thread Brian Wolff
Hi, I believe they are coming. -bawolff On Wednesday, November 15, 2017, Seb35 wrote: > Hi! > > There is no corresponding Git tags 1.29.2, 1.28.3, 1.27.4, could someone > issue them? > > I guess they are respectively ee7f9fe, 5b85506, a806476. > > Thanks! > ~ Seb35 > > Le 15/11/2017 à 00:37, Sa

Re: [Wikitech-l] Proposal for a developer support channel

2017-11-17 Thread Brian Wolff
On Friday, November 17, 2017, Quim Gil wrote: > Hi, > > The Technical Collaboration team proposes the creation of a developer > support channel focusing on newcomers, as part of our Onboarding New > Developer program. We are proposing to create a site based on Discourse > (starting with a pilot in

Re: [Wikitech-l] Proposal for a developer support channel

2017-11-18 Thread Brian Wolff
eceiving questions from new developers, they >> > will continue doing whatever they do now. >> > >> > > I'd like to understand how adding a venue will improve matters. >> > >> > For new developers arriving to our shores, being able to ask a first >&

Re: [Wikitech-l] Proposal for a developer support channel

2017-11-18 Thread Brian Wolff
have any better solution to the spam issue. -- bawolff On Sun, Nov 19, 2017 at 3:33 AM, Brian Wolff wrote: > Neither project:support_desk nor project:current_issues is really meant for > that purpose - support desk is mainly for user and (external) sysadmin > support. And current_issues

Re: [Wikitech-l] FLIF for Wikimedia

2017-12-04 Thread Brian Wolff
An encode latency of 7 seconds and decode latency of 1 second arent what I would call "very fast" (the decode latency measurement probably isnt realistic as decode and encode to png is different from just display in browser. Then again all these measurements are going to vary by filesize, not to me

Re: [Wikitech-l] Fwd: Re: [Wikidata] Imperative programming in Lua, do we really want it?

2017-12-07 Thread Brian Wolff
Lua is used for many purposes - some of which I think are well suited to an imperaive approach (or at least would be totally fine to do in an imperative style). There are of course many cases where an imperative approach would be a poor choice. There are no rules that apply to all programming thin

Re: [Wikitech-l] FLIF for Wikimedia

2017-12-10 Thread Brian Wolff
Maybe not a hard no, but I would rate the probability as somewhere around 1%. If you really wanted to push this (with the understanding that its probably not going anywhere) I would say make a report, comingup with a solid case with a solid implementation plan, including: * what is the fallback pl

[Wikitech-l] Announcing a new security testing tool for MediaWiki extensions "phan-taint-check-plugin"

2017-12-11 Thread Brian Wolff
Hello everyone, For the last little while I have been working on a new tool to automatically detect common security issues in MediaWiki extensions. The tool can detect a number of issues, including: * XSS ** We include here using wfMessage( 'foo' )->text() when you should have used ->escaped()

Re: [Wikitech-l] Announcing a new security testing tool for MediaWiki extensions "phan-taint-check-plugin"

2017-12-14 Thread Brian Wolff
ebrew will let you do this, and I assume other installation methods will let you do this too. Thanks, Brian On Thursday, December 14, 2017, Tom Bishop, Wenlin Institute < tan...@wenlin.com> wrote: > > >> On Dec 11, 2017, at 4:09 PM, Brian Wolff wrote: >> >> ... >

Re: [Wikitech-l] Many spurious RefreshLinksDynamic jobs in Queue

2017-12-19 Thread Brian Wolff
DynamicRefreshLinks jobs are meant in cases where links vary pretty much randomly (e.g. you have something on the page causing a low cache time). The idea being that code like [[category:Foo {{CURRENTHOUR}}]] should have categories refreshed regularly and not just during edit. The RefreshLinksDyna

Re: [Wikitech-l] Deprecation + phan issue

2017-12-19 Thread Brian Wolff
I agree with this. Splitting the deprecation phan issues out to a separate non-voting job sounds like a good idea (and should be easily supported by phan with its issue whitelist/blacklist config directive) Ideally we would have a phan plugin that generates warnings for hard deprecations (wfDeprec

Re: [Wikitech-l] Security question re password resets and Spectre

2018-01-04 Thread Brian Wolff
No, spectre/meltdown wouldnt apply to that situation. The meltdown/spectre vulnerabilities is all about computer programs having access to data they should not. In order to exploit the attacker must be able to run computer programs on the victims computer. -- brian On Thursday, January 4, 2018,

Re: [Wikitech-l] Security question re password resets and Spectre

2018-01-04 Thread Brian Wolff
Labs and production machines are separate machines. An attack on labs in the worst case would only be able to attack other labs users. As Cyken said, one of the very scary scenarios is js getting access to data it should not have access to (e.g. if your inputting your password in one tab and a mal

Re: [Wikitech-l] Security question re password resets and Spectre

2018-01-05 Thread Brian Wolff
[This is kind of getting far afield of mediawiki, but...] Spectre can potentially be used to read your private (bitcoin) keys, so bitauth is just as vulnerable to it as anything else (assuming keys on your computer and not some hardware token setup). The only benefit i see is that bitauth would pro

<    1   2   3   4   5   6   7   >