Wikimedia Security Team/AppSec Clinic Minutes/2023-02-13

Date: 2023-02-13

Attending: CLemoisson-WMF, MMartorana_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

edit
  1. MMartorana_(WMF)
    1. T326952 - Test the patch and deploy?
    2. T327445 - Is someone interested in this?
    3. T328746 - Waiting for Andre or Reedy.
    4. T328393 - Is someone interested in this?
  2. MStyles_(WMF)
    1. T313241 - Maint script merged, determine next steps.
    2. T316360 - Awaiting feedback.
    3. T318731 - Assigned to MStyles_(WMF) for follow-up.
    4. T318731 - untagged security team
    5. T320363 - untagged security team
    6. T323651 - Assigned to MStyles_(WMF) to review.
    7. T326769 - Assigned to MStyles_(WMF) for follow-up.
    8. T328667 - Assigned to MStyles_(WMF) for review.
  3. Reedy_(WMF)
    1. T306211 - Response provided, requesting team can re-tag when ready for CR.
    2. T310393 - Open, untriaged.
    3. T318825 - Assigned for follow-up.
    4. T321092 - Assigned for follow-up.
    5. T324322 - In progress, likely decline.
    6. T324323 - In progress, likely decline.
    7. T325251 - Assigned for follow-up.
  4. SBassett_(WMF)
    1. T315820 - Triage, await discussion.
    2. T316722 - Await discussion.
    3. T326871 - Waiting on AHT/Thalia response.
    4. T306708 - Review with secteam leadership.
    5. T328568 - Push reviewers for merge.

Sent to Kelton
Sent to Privacy Engineering

  1. T328274
  2. T325663

New Phabricator Tasks Reviewed

edit
  1. T328580 - Added to secteam watching, SRE responsible.
  2. T328667 - Assigned to SBassett_(WMF) for review.
  3. T329417 - Assigned to MMartorana_(WMF) for review. Try to reproduce the issue.