Wikimedia Security Team/AppSec Clinic Minutes/2023-09-05

Date: 2023-09-05

Dashboard: https://phabricator.wikimedia.org/portal/view/3/

Attending: CLemoisson-WMF, MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

1. MMartorana_(WMF)
   1. T144097 - Testing locally, requesting staff rights to prod-test.
   2. T336113 - Volunteer tagged for review.
   3. T343664 - WMF staff tagged for review.
2. MStyles_(WMF)
   1. T335164 - Analysis work assigned to Maryum.
   2. T338238 - Set up AppSec CI includes for iPoid.
   3. T338611 - Waiting Releng to deploy.
   4. T344130 - To review, possibly write patch.
3. SBassett_(WMF)
   1. T326871 - Waiting on AHT/Thalia response.
   2. T336310 - Amir said to add group, maybe try?
   3. T344359 - Patch basics seem fine, but could use a little more CR.

Sent to Privacy Engineering

No new tasks from the appsec clinic this week.

New Phabricator Tasks Reviewed

1. T345333 Assigned to MStyles_(WMF) for review.
2. Other #prod-risk-assessment tasks triaged, #security-team tag removed.