Scrum of scrums/2015-03-04

Facilitating: Grace Gellerman

Apps

 * https://phabricator.wikimedia.org/T90228 ("Investigate building a Node.js service for mobile apps content") is coming along nicely (update at https://lists.wikimedia.org/pipermail/mobile-l/2015-March/008695.html). https://phabricator.wikimedia.org/T87824 ("Create specialised content API for mobile apps ") looks like it will be an achievable task with this preliminary work.
 * https://phabricator.wikimedia.org/T90606 Avoid cache fragmenting URLs for Share a Fact shares: Adam B pinged on IRC last week, just pinged on Phabricator ticket, also emailed analytics list about a shorter, non-colliding parameter name "wmfxan".

Multimedia

 * Sentry review for tgr - https://phabricator.wikimedia.org/T84956 https://phabricator.wikimedia.org/T85262
 * Burndown charts in Phabricator - do they work for you? - https://phabricator.wikimedia.org/project/sprint/burn/1073/

Services

 * RESTBase
 * Prod v0 ticket: https://phabricator.wikimedia.org/T89481
 * live, hit some issues with Cassandra, which are being addressed now - https://phabricator.wikimedia.org/T89066
 * still waiting on one machine - https://phabricator.wikimedia.org/T89639
 * about to enable it to serve test wikis && WPs - https://gerrit.wikimedia.org/r/#/c/194244/
 * Mobile Apps
 * working on their service prototype and a service template for Node.js
 * VE
 * our team focused on getting RESTBase in VRS - https://phabricator.wikimedia.org/T89066
 * MW core patch: https://gerrit.wikimedia.org/r/#/c/193826/
 * VE-ext patch: https://gerrit.wikimedia.org/r/#/c/194338/
 * Graphoid
 * code is ready, Puppet modules and deployment missing - https://phabricator.wikimedia.org/T90487
 * Citoid
 * some code rework done (improvements, clean-up, tests)
 * still some issues to resolve
 * depends on the Zotero service which is not working properly (blocked on Ops) - https://phabricator.wikimedia.org/T76308

Language

 * Some languages missing from our dashboard - Dan is already aware
 * Translate's page translation has gone extra wonky on production - no longer possible to mark some page for translation. I am out of ideas what could be going wrong, so I'd appreciate any help to debug the issue. https://phabricator.wikimedia.org/T90704
 * We tested the parsoid ref change - it seems some work needed from our side

Security

 * Still working on T78730 (Manually verify whitelisted.yaml / graylisted.yaml to ensure completeness)
 * Hopefully facebook will fix T85848
 * Hiring

Parsoid

 * No blockers on anything.
 * Deployed DOM spec change for tags on Monday and everything still good in VE land as expected.
 * Nothing more notable to report - continue to fixing VE Q3 blocker bugs and deploying them.

MediaWiki Core

 * AuthManager RfC out of draft and ready for review (review today on irc)
 * Work on utfnormal library continuing with help from Brion
 * Preparing data and scripts so that SUL account name change notifications can be sent
 * BlazeGraph announced to ops-l as WDQv2 backend choice pending some final verifications
 * Ori worked with both Sean and Ops on EventLogging maintenance work (db master change and new nodes provisioned)
 * Ori deployed HTTPS capability test

Fundraising Tech

 * Usual fr-stuff (deployed CN patch to reduce RecordImpression requests by 2/3!)
 * Got results of PCI compliance review: https://collab.wikimedia.org/wiki/Fundraising/Engineering/PCI_Gap_Assessment_Feb_2015
 * Impact is almost entirely limited to the fundraising team
 * Stuff to do: https://phabricator.wikimedia.org/T77912
 * Info in scope is only credit card number, expiration date and CVN
 * Machines in scope are just the payments cluster and dev machines of people that can deploy there
 * We will need some help from the security team to do or recommend contractors for (private phab tasks)
 * Annual internal scan: https://phabricator.wikimedia.org/T91448
 * Annual penetration testing: https://phabricator.wikimedia.org/T91447
 * Annual code review *or* web application firewall: https://phabricator.wikimedia.org/T91449
 * Regular security training for fr-tech: https://phabricator.wikimedia.org/T91451

Release Engineering
* no blockers currently * staging cluster with uptime metrics in progress * figuring out tarball releases * ongoing work on disposible VMs for CI (slated for July) * researching per-team browser test dashboard

Editing

 * Roan in Europe this week and next week
 * Breaking change release of OOjs UI later today or tomorrow
 * Breaking what?


 * Parsoid reference change was deployed on Monday, exposed a bug but we fixed it quickly