Wikimedia Security Team/AppSec Clinic Minutes/2024-09-23

Date: 2024-09-23

Dashboard: https://phabricator.wikimedia.org/portal/view/3/

Attending: MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

Previous Tasks

edit
  1. MMartorana_(WMF)
  2. MStyles_(WMF)
    1. T374766 - watching, might be a good task for our security engineering team
    2. T367677 - pinged the team, will remove from our watch after next week
  3. SBassett_(WMF)
    1. T374438 - patch deployed, watching for now
    2. T364776 - still waiting for Amir's feedback (check the test, ready to be merged - Cléo to check in with Amir)
    3. T366005 - still needs SRE's opinion (stalled but low priority)
  4. Reedy
    1. T373933 - Cléo has pinged Reedy, SBassett also commented here

New Phabricator Tasks Reviewed

edit
  1. T375358 - SBassett_(WMF) - volunteers did most work, assisting with supp release work
  2. T375146 - untagged for SRE/Data
  3. T375307 - MMartorana_(WMF) - to triage, search phab, add mw-eng, etc.
  4. T375389 - SBassett_(WMF) - will watch, likely a non-issue