Wikimedia Security Team/AppSec Clinic Minutes/2023-06-20

Date: 2023-06-20

Attending: CLemoisson-WMF,, ,

Phabricator Tasks In Progress

 * 1) MMartorana_(WMF)
 * 2) T144097 - Investigating potential patches.
 * 3) T334437 - Working on a patch.
 * 4) T336113 - To triage, maybe write patch.
 * 5) T337695 - Asked Legal to sign a new NDA.
 * 6) T338034 - In-progress.
 * 7) MStyles_(WMF)
 * 8) T323651 - Leave note that other patches can go through gerrit.
 * 9) T335164 - Analysis work assigned to Maryum.
 * 10) T250720#8830971 - One patch is on gerrit, others might need rebase?
 * 11) T338238 - Set up AppSec CI includes for iPoid.
 * 12) Reedy_(WMF)
 * 13) T333722 - Decom channel soon.
 * 14) T318825 - Assigned for follow-up.
 * 15) T321092 - Assigned for follow-up.
 * 16) T330086 - Done, add reporter to secteam HoF.
 * 17) T335204 - Assigned to  for review.
 * 18) T335288 - Assigned to  for review.
 * 19) T338094 -  triaged, assigned to Kosta H.
 * 20) T337949 - Assigned to  for review.
 * 21) T338104 - Assigned to  for review.
 * 22) T338105 - Assigned to  for review.
 * 23) SBassett_(WMF)
 * 24) T326871 - Waiting on AHT/Thalia response.
 * 25) T336310 - Confirm right was added by Amir, the resolve task.
 * 26) T337274 - PR merged, still need to confirm prod deployment.
 * 27) T338092 - To analyze.

Sent to Kelton

Sent to Privacy Engineering

New Phabricator Tasks Reviewed

 * 1) T338419 -  to analyze.
 * 2) T338611 -  to analyze, see also: T338611.
 * 3) T338682 -  to analyze.