Wikimedia Security Team/AppSec Clinic Minutes/2023-08-14

  1. MMartorana_(WMF)
    1. T144097 - Investigating potential patches.
    2. T334437 - The issue couldn't be reproduced neither by Manfredi nor OP.
    3. T336113 - Platform Engineering team tagged.
    4. T338419 - ATH is deprioritising this.
    5. T343664 - Triaged, looking for solutions.
  2. MStyles_(WMF)
    1. T335164 - Analysis work assigned to Maryum.
    2. T338238 - Set up AppSec CI includes for iPoid.
    3. T338611 - Check in with Releng in another week or two.
    4. T341529 - Patch to be deployed
  3. SBassett_(WMF)
    1. T326871 - Waiting on AHT/Thalia response.
    2. T336310 - Amir to add new group soon-ish, re-pinged.
    3. T343138 - Monitoring.

Sent to Privacy Engineering

No new tasks from the appsec clinic this week.

New Phabricator Tasks Reviewed edit

  1. T343988 Assigned to MStyles_(WMF) for review.
  2. T343822 Assigned to SBassett_(WMF) for review.
  3. T344088 Assigned to MMartorana_(WMF) for review. Resolved, can be removed.
  4. T344130 Assigned to MStyles_(WMF) for review.
  5. T343930 has been moved from Incoming to Watching.