Wikimedia Security Team/Security Review Scrum/2019-06-25

Date/time: June 25th, 2019 - 10:00 AM PDT

Attending: Brian, Michal Anna, Scott, Jennifer

Updates:

Backlog

• Brian to probably hand off to Sam not started - https://phabricator.wikimedia.org/T223307
• Exploring outsourced reviews for OIT things, rewrites, JB to follow up after new vendor budgets set stalled - https://phabricator.wikimedia.org/T155537, https://phabricator.wikimedia.org/T156960, https://phabricator.wikimedia.org/T148246, https://phabricator.wikimedia.org/T187846
• DoubleWiki, Brian to deploy as sec release, then push through gerrit, stalled - https://phabricator.wikimedia.org/T131199
• Audiences user-testing concept review, stalled - https://phabricator.wikimedia.org/T220043
• Audiences growth team emails concept review, stalled - https://phabricator.wikimedia.org/T220242

Active

• Waiting on update from Yurik/Vega folks (upstream) to proceed stalled - https://phabricator.wikimedia.org/T222806
• Planet Wikimedia - assigned to Michal Anna, stalled - https://phabricator.wikimedia.org/T207246
• Wikisource ext, starting - https://phabricator.wikimedia.org/T217289

Waiting

• Wikibase Termbox, completed for now, John to follow up with Raz re: risk ownership, in-progress - https://phabricator.wikimedia.org/T216419
• Labs db/sanitarium and maintain-views.yaml audits - transition to James F for review, in-progress - https://phabricator.wikimedia.org/T169097, https://phabricator.wikimedia.org/T103011