Wikimedia Security Team/AppSec Clinic Minutes/2023-07-10

Date: 2023-07-10

Attending: MMartorana_(WMF), MStyles_(WMF), SBassett_(WMF)

Phabricator Tasks In Progress

1. MMartorana_(WMF)
   1. T144097 - Investigating potential patches.
   2. T334437 - Working on a patch.
   3. T336113 - To triage, maybe write patch.
   4. T337695 - Legal has requested information, will work to securely transmit to them.
   5. T338034 - MR
   6. T338419 - Patch still in progress, Manfredi to move on boards, add #secteam-processed
   7. T340200 - To analyze.
2. MStyles_(WMF)
   1. T335164 - Analysis work assigned to Maryum.
   2. T338238 - Set up AppSec CI includes for iPoid.
   3. T338611 - Offer guidance if necessary.
   4. T339393 - To analyze.
   5. T340221 - To follow up.
   6. T340200 - To deploy today.

1. Reedy_(WMF)
   1. T333722 - Decom channel soon.
   2. T318825 - Assigned for follow-up.
   3. T321092 - Assigned for follow-up.
   4. T330086 - Done, add reporter to secteam HoF.
   5. T335204 - Assigned to Reedy_(WMF) for review.
   6. T335288 - Assigned to Reedy_(WMF) for review.
   7. T338094 - Reedy_(WMF) triaged, assigned to Kosta H.
   8. T337949 - Assigned to Reedy_(WMF) for review.
   9. T338104 - Assigned to Reedy_(WMF) for review.
   10. T338105 - Assigned to Reedy_(WMF) for review.
2. SBassett_(WMF)
   1. T326871 - Waiting on AHT/Thalia response.
   2. T336310 - Amir to add new group soon-ish.
   3. T339260 - Pushed to gerrit for review.
   4. T340217 - To include in forthcoming Vector 2022 review.
   5. T340645 - To triage.
   6. T341141 - Waiting on requester to set up 2fa.

Sent to Privacy Engineering

New Phabricator Tasks Reviewed

No new assignable tasks this week