Page MenuHomePhorge
Feed Advanced Search

Jun 8 2017

lewiscawte added a comment to T210: Security risk with EditAccount and LookupUser.

@lewiscawte I'm more concerned about EditAccount, which poses stronger risks.

Jun 8 2017, 1:02 AM · Restricted Project, LookupUser
Xauroflaux added a comment to T210: Security risk with EditAccount and LookupUser.

@lewiscawte I'm more concerned about EditAccount, which poses stronger risks.

Jun 8 2017, 12:37 AM · Restricted Project, LookupUser
lewiscawte closed T210: Security risk with EditAccount and LookupUser as Invalid.

Yes, there are security and/or privacy issues. The applicable part here being "privacy issues". Which is why only staff can use these tools to enable us to do our jobs. We take privacy seriously, and these tools are not used unless it is necessary. LookupUser was originally written by one of the key MediaWiki developers, who is currently employed by the Wikimedia Foundation, so will have been written with security and privacy concerns in mind.

Jun 8 2017, 12:35 AM · Restricted Project, LookupUser
Xauroflaux updated subscribers of T210: Security risk with EditAccount and LookupUser.
Jun 8 2017, 12:32 AM · Restricted Project, LookupUser
Xauroflaux triaged T210: Security risk with EditAccount and LookupUser as Unbreak Now! priority.
Jun 8 2017, 12:21 AM · Restricted Project, LookupUser
Xauroflaux created T210: Security risk with EditAccount and LookupUser.
Jun 8 2017, 12:21 AM · Restricted Project, LookupUser

May 1 2017

SamanthaNguyen closed T205: Refactor form on Special:LookupUser to use HTMLForm as Invalid.

Oops, moved upstream instead: https://phabricator.wikimedia.org/T164231

May 1 2017, 10:47 PM · Technical Debt, LookupUser
SamanthaNguyen added a project to T205: Refactor form on Special:LookupUser to use HTMLForm: Technical Debt.
May 1 2017, 10:42 PM · Technical Debt, LookupUser
SamanthaNguyen created T205: Refactor form on Special:LookupUser to use HTMLForm.
May 1 2017, 10:41 PM · Technical Debt, LookupUser
SamanthaNguyen created LookupUser.
May 1 2017, 10:41 PM