Wikimedia Security Team/AppSec Clinic Minutes/2023-02-13

Date: 2023-02-13

Attending: CLemoisson-WMF, MMartorana_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T326952 - Test the patch and deploy?
   2. T327445 - Is someone interested in this?
   3. T328746 - Waiting for Andre or Reedy.
   4. T328393 - Is someone interested in this?
2. MStyles_(WMF)
   1. T313241 - Maint script merged, determine next steps.
   2. T316360 - Awaiting feedback.
   3. T318731 - Assigned to MStyles_(WMF) for follow-up.
   4. T318731 - untagged security team
   5. T320363 - untagged security team
   6. T323651 - Assigned to MStyles_(WMF) to review.
   7. T326769 - Assigned to MStyles_(WMF) for follow-up.
   8. T328667 - Assigned to MStyles_(WMF) for review.
3. Reedy_(WMF)
   1. T306211 - Response provided, requesting team can re-tag when ready for CR.
   2. T310393 - Open, untriaged.
   3. T318825 - Assigned for follow-up.
   4. T321092 - Assigned for follow-up.
   5. T324322 - In progress, likely decline.
   6. T324323 - In progress, likely decline.
   7. T325251 - Assigned for follow-up.
4. SBassett_(WMF)
   1. T315820 - Triage, await discussion.
   2. T316722 - Await discussion.
   3. T326871 - Waiting on AHT/Thalia response.
   4. T306708 - Review with secteam leadership.
   5. T328568 - Push reviewers for merge.

Sent to Kelton
Sent to Privacy Engineering

1. T328274
2. T325663

New Phabricator Tasks Reviewed

1. T328580 - Added to secteam watching, SRE responsible.
2. T328667 - Assigned to SBassett_(WMF) for review.
3. T329417 - Assigned to MMartorana_(WMF) for review. Try to reproduce the issue.