Wikimedia Security Team/Security Review Scrum/2019-07-30

Date/time: July 30th, 2019 - 10:00 AM PDT

Attending: Scott, Sam

Updates: ^  indicates change

Backlog


 * John to explore funding of 3rd party audits this quarter, stalled - https://phabricator.wikimedia.org/T155537, https://phabricator.wikimedia.org/T156960, https://phabricator.wikimedia.org/T148246, https://phabricator.wikimedia.org/T187846

Active


 *  ^  Parsoid-PHP, moved to active, assigned to Scott for now, Scott & Sam status meeting w/ Subbu today, in-progress - https://phabricator.wikimedia.org/T227209
 *  ^  Security review of preact 8.4.2, Scott did a very simple assessment, unassigned, stalled https://phabricator.wikimedia.org/T227726
 *  ^  Concept Review for the machine vision, unassigned, stalled - https://phabricator.wikimedia.org/T227591
 * Page Content Service route /page/mobile-html, starting - https://phabricator.wikimedia.org/T227114
 * Security review of WebAuthn library dependancies, in-progress - https://phabricator.wikimedia.org/T227244
 *  ^  Doublewiki (old), Scott to wrap up loose ends and resolve, in-progress - https://phabricator.wikimedia.org/T131199
 * Planet Wikimedia - assigned to Michal Anna, stalled - https://phabricator.wikimedia.org/T207246

Waiting


 *  ^  CentralNotice Code Review request, should be completed, waiting - https://phabricator.wikimedia.org/T226963
 *  ^  (informal) Security Concept Review For LibUp 2.0, should be completed, waiting https://phabricator.wikimedia.org/T227820
 * John and Scott to follow up with Raz re: risk ownership, in-progress - https://phabricator.wikimedia.org/T216419
 * Labs db/sanitarium and maintain-views.yaml audits, assigned to James F, stalled - https://phabricator.wikimedia.org/T169097, https://phabricator.wikimedia.org/T103011

Frozen (delayed indefinitely)


 * Waiting on update from Yurik/Vega folks (upstream) to proceed, stalled - https://phabricator.wikimedia.org/T222806
 * Audiences user-testing concept review, stalled - https://phabricator.wikimedia.org/T220043
 * Audiences growth team emails concept review, stalled - https://phabricator.wikimedia.org/T220242