Wikimedia Security Team/AppSec Clinic Minutes/2022-09-06

Date: 2022-09-06

Attending: MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T312820 - Tgr patch to be tested locally by Manfredi.
   2. T314245 - Patch ready to be deployed.
   3. T315407 - Potential incident follow-up/investigation?
   4. T306018 - Needs follow-up.
   5. T316414 - Needs follow-up.
2. MStyles_(WMF)
   1. T311337 - CR received, patch ready to be deployed.
   2. T312951 - Ready to grant access.
   3. [phab:T313241|T313241]] - Niklas added maint script, Maryum to follow up on actionables.
   4. T314425 - Scott needs to update 'user' issue in hardening patch, then can probably merge.
   5. T315123 - Assigned to AHT, follow up in another week.
   6. T316360 - Assigned to MStyles_(WMF) for follow-up.
3. Reedy_(WMF)
   1. T315366 - Inform Legal of results?
   2. T316304 - Assigned to Reedy_(WMF) for follow-up (as they created it).
   3. T306516 - Open, lowest.
   4. T306211 - Open, untriaged.
   5. T310393 - Open, untriaged.
   6. T311368 - Open, untriaged.
4. SBassett_(WMF)
   1. T315570 - Scott to ping Brendan again on arch setup, review diagram.
   2. T313898 - Triaged as low, ongoing discussion for solution, wait another week?
   3. T314884 - Awaiting response from legoktm.
   4. T315820 - To triage.
   5. T316029 - Review comments/follow-up.

New Phabricator Tasks Reviewed

1. T316722 - Assigned to SBassett_(WMF) for follow-up.
2. T316998 - Assigned to MMartorana_(WMF) for follow-up.