User:CSteipp (WMF)

Chris Steipp

Security Engineer, Wikimedia Foundation

Prevent, Detect, Respond.

About me

Early on in life, I fell in love with seeing the mathematics that underpin modern cryptographic systems, and a certain beauty of those systems. I studied security in school, ending with an MSc from Royal Holloway (you can blame them for Lucky 13, among other things). My thesis was on trust in anonymity networks, because it was a difficult enough problem to keep me interested. I've been working in the information security industry since. Unlike most members of the platform team, I was not involved in the community before the foundation hired me, although I've had a passion for open source and openness in security throughout my career. Working for the foundation has given me a new window into what security can look like in open and transparent organizations.

My work

Lead for the Wikimedia Security Team

Disclaimer: I work for the Wikimedia Foundation, and this is the account I intend to use for edits or statements I make in that role. However, the Foundation does not vet all my activity, so edits, statements, or other contributions made by this account may not reflect the views of the Foundation.

Contact me

csteipp on freenode IRC
csteippwikimedia.org
For general security issues, please use securitywikimedia.org, or see Reporting security bugs

Current projects

MediaWiki security issues

Reporting security bugs - Where to report them, what kind of information is useful, and what to expect from the WMF
How to deploy security patches on the WMF cluster
How to perform security fixes - slightly longer set of instructions for creating, applying, and deploying a security fix
Release checklist - instructions for performing a release, including security releases

Other Stuff

Committed identity: f929dedee402a249bad669e58df404ac80ae4f08b83f8bb7eae2a47d6774ad07 is a SHA-256 commitment to this user's real-life identity.