Wikimedia Security Team/AppSec Clinic Minutes/2023-04-12

Date: 2023-04-12

Attending: ACooper-WMF, CLemoisson-WMF, MMartorana_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T328393 - Try to find CU maintainers interested in fixing.
   2. T144097 - Investigating potential patches.
   3. T331477 - Tag Releng, reach out to DC folks about info leaks.
   4. T332889 - Try to understand if/who owns LogFormatter?
   5. T333723 - Ask if can be public, suggest filing new feature (url checker) as public bug.
2. MStyles_(WMF)
   1. T323651 - Suggest undeploy, Scott also looking into rebase of patch.
   2. T333050 - Need to get reviewers for public gerrit patch.
3. Reedy_(WMF)
   1. T318825 - Assigned for follow-up.
   2. T321092 - Assigned for follow-up.
   3. T330086 - Done, Reedy to include w/ next sec release.
4. SBassett_(WMF)
   1. T326871 - Waiting on AHT/Thalia response.
   2. T328568 - Push reviewers for merge.
   3. T333140 - Keep monitoring incident, feel like mitigation is in good place now.
   4. T333722 - Reach out to Sam to decom channel.

Sent to Kelton
Sent to Privacy Engineering

New Phabricator Tasks Reviewed

1. T334437 - Assigned to MMartorana_(WMF) for review.
2. T334403 - Assigned to SBassett_(WMF) for review.