Wikimedia Security Team/AppSec Clinic Minutes/2022-10-17

Date: 2022-10-17

Attending: CLemoisson-WMF,, ,

Phabricator Tasks In Progress

 * 1) T315407 - "Passive watching", maybe get Kelton's take?
 * 2) T316414 - Manfredi will work on a ported patch for this edge case.
 * 3) T318915 - Tag PE for risk assessment help, determine some path forward.
 * 4) T313241 - Maint script merged, determine next steps.
 * 5) T316360 - Awaiting feedback.
 * 6) T316998 - Overly-cautious security-protection, possible follow-up.
 * 7) T318731 - Assigned to  for follow-up.
 * 8) T318731 - Assigned to  for follow-up.
 * 9) T319134 - Assigned to  for follow-up.
 * 10) T320363 - Assigned to  for follow-up.
 * 11) T306211 - Open, untriaged.
 * 12) T310393 - Open, untriaged.
 * 13) T318825 - Assigned to  for follow-up.
 * 14) T314884 - Awaiting further response from legoktm.
 * 15) T315820 - Triage, await discussion.
 * 16) T316722 - Await discussion.
 * 17) T320540 - Assigned to  for follow-up.
 * 1) T314884 - Awaiting further response from legoktm.
 * 2) T315820 - Triage, await discussion.
 * 3) T316722 - Await discussion.
 * 4) T320540 - Assigned to  for follow-up.

New Phabricator Tasks Reviewed

 * 1) T317595 - Assigned to  to review discussion and new tasks.
 * 2) T320611 - Assigned to  to review 2fa and then grant access to relevant sub-policy.
 * 3) T320719 - Assigned to  to review 2fa and then grant access to relevant sub-policy.