Wikimedia Security Team/AppSec Clinic Minutes/2023-05-30

Date: 2023-05-30

Attending: MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T144097 - Investigating potential patches.
   2. T334437 - Claimed and attempting a patch.
   3. T336113 - To triage, maybe write patch.
   4. T336711 - To analyze.
2. MStyles_(WMF)
   1. T323651 - Leave note that other patches can go through gerrit.
   2. T335164 - Analysis work assigned to Maryum.
   3. T250720#8830971 - One patch is on gerrit, others might need rebase?
3. Reedy_(WMF)
   1. T333722 - Decom channel soon.
   2. T318825 - Assigned for follow-up.
   3. T321092 - Assigned for follow-up.
   4. T330086 - Done, add reporter to secteam HoF.
   5. T335204 - Assigned to Reedy_(WMF) for review.
   6. T335288 - Assigned to Reedy_(WMF) for review.
4. SBassett_(WMF)
   1. T326871 - Waiting on AHT/Thalia response.
   2. T336310 - Merge Amir's soverride patch.
   3. T337274 - Submitted pull request, added potential reviewers on task.

Sent to Kelton
Sent to Privacy Engineering

New Phabricator Tasks Reviewed

1. T36958 - SBassett_(WMF) to analyze.
2. T337561 - SBassett_(WMF) to work with SRE, maybe.
3. T337695 - MMartorana_(WMF) to manage and verify with WMF Legal.
4. T337714 - MStyles_(WMF) to watch, maybe help with AppSec CI.
5. T337757 - MMartorana_(WMF) - verify not comms/branding, evaluate proposed solutions.