Wikimedia Security Team/AppSec Clinic Minutes/2026-06-09

Date: 2026-06-09

Dashboard: https://phabricator.wikimedia.org/portal/view/3/

Attending: ASanford-WMF, APrum-WMF, Roan Kattouw (WMF), MMartorana_(WMF), MStyles (WMF), Reedy, RSilvola-WMF, SBassett_(WMF)

Previous Tasks

1. MMartorana_(WMF)
2. MStyles_(WMF)
   1. T427589 - To triage and propose basic solutions.
3. SBassett_(WMF)
   1. T399102 - Needs more review, then merge. (low-priority)
   2. T415590 - Pinged twice, no response.
   3. T120386 - To review old patch.
   4. T422246 - Verify production status.
   5. T423568 - To monitor, review.
   6. T423769 - To monitor, review, captcha implications?
   7. T426913 - Follow up with RSilvola re: resolve-ability.
4. Reedy
   1. T302770 - Stalled.
   2. T425970 - Do rotations and see what happens :)
   3. T426993 - Post-incident follow-up, to do this week.
   4. T427611 - To follow up with RSilvola-WMF on remaining issues.
5. Roan Kattouw (WMF)
   1. T385391 - Next to triage and review.
   2. T407974 - Next to triage and review.
   3. T407977 - Next to triage and review.
6. APrum-WMF
   1. T420601 - In progress, SBassett_(WMF) shepherding for now.
7. ASanford-WMF
8. RSilvola-WMF
   1. T415219 - To provide clarity around policy.
   2. T416930 - To investigate.

New Phabricator Tasks Reviewed

1. T428103 - Hyp work, assigned to Reedy
2. T428104 - Hyp work, assigned to Reedy
3. T428324 - Roan Kattouw (WMF) to review, possibly deploy today
4. T427869 - Secteam untag, leaving to SRE
5. T428003 - Assigned to RSilvola-WMF
6. T428006 - Assigned to SBassett_(WMF) for follow-up
7. T428064 - Assigned to Roan Kattouw (WMF) to get approvals
8. T428274 - Secteam watching, tracking for supp release
9. T428394 - Secteam untag, leaving to safety team
10. T428585 - Secteam untag
11. T402145 - APrum-WMF to provide basic privacy review