Wikimedia Security Team/Security Review Scrum/2019-08-20

From mediawiki.org

Date/time: August 20th, 2019 - 10:00 AM PDT

Attending: Scott, Jennifer

Updates: ^ indicates change

Backlog

  • Security Review for MediaWiki REST API, assigned to Sam, https://phabricator.wikimedia.org/T230140
  • John to explore funding of 3rd party audits this quarter, stalled - https://phabricator.wikimedia.org/T155537, https://phabricator.wikimedia.org/T156960, https://phabricator.wikimedia.org/T148246, https://phabricator.wikimedia.org/T187846

Active

  • ^ Parsoid-PHP, moved to active, requesting additional review by Sam, in-progress - https://phabricator.wikimedia.org/T227209
  • Security review of preact 8.4.2, Scott did a very simple assessment, unassigned, stalled https://phabricator.wikimedia.org/T227726
  • Page Content Service route /page/mobile-html, starting - https://phabricator.wikimedia.org/T227114
  • Security review of WebAuthn library dependancies, in-progress - https://phabricator.wikimedia.org/T227244
  • Planet Wikimedia - assigned to Michal Anna, stalled - https://phabricator.wikimedia.org/T207246

Waiting

  • John and Scott to follow up with Raz re: risk ownership, in-progress - https://phabricator.wikimedia.org/T216419
  • Labs db/sanitarium and maintain-views.yaml audits, assigned to James F, stalled - https://phabricator.wikimedia.org/T169097, https://phabricator.wikimedia.org/T103011

Frozen (delayed indefinitely)

  • Audiences user-testing concept review, stalled and contacted - https://phabricator.wikimedia.org/T220043
  • Audiences growth team emails concept review, stalled - https://phabricator.wikimedia.org/T220242

Closing Soon / Closed

  • ^ CentralNotice Code Review request, closed- https://phabricator.wikimedia.org/T226963
  • ^ Waiting on update from Yurik/Vega folks (upstream) to proceed, closed - https://phabricator.wikimedia.org/T222806
  • ^ Concept Review for the machine vision middleware project, closed- https://phabricator.wikimedia.org/T227591
  • ^ Doublewiki (old), Scott to resolve this week, in-progress - https://phabricator.wikimedia.org/T131199
  • ^ Banner preview - Scott to resolve this week, waiting - https://phabricator.wikimedia.org/T230176
Retrieved from "https://www.mediawiki.org/w/index.php?title=Wikimedia_Security_Team/Security_Review_Scrum/2019-08-20&oldid=3629748"