On Thu, Oct 3, 2013 at 2:12 PM, Risker <risker.wp@gmail.com> wrote:


On 3 October 2013 16:43, Chris Steipp <csteipp@wikimedia.org> wrote:

On Thu, Oct 3, 2013 at 10:06 AM, Risker <risker.wp@gmail.com> wrote:
Please note that it is especially important to change your passwords on the Wikimania wikis where you have accounts.  These are non-SUL wikis and changing your SUL password will not effect a change on the Wikimania 2013 and 2014 wikis.  Even if you never intend to edit those wikis again, your password and account could still hypothetically be compromised.

wikimania2013.wikimedia.org and wikimania2014.wikimedia.org are both part of SUL, so most users should use their CentralAuth account to login. They are slightly odd in that we don't give you a cookie for those sites when you initially login on another wiki, but with SUL2, you *should* get logged in when you visit the site.

However, since SUL2 is relatively new, and you wouldn't get automatically logged in when visiting the site with the original SUL, I'm guessing many users visited the wikimania sites for the first time, logged in with their centralauth username and password, and continued on their way, which is one of the conditions where the local wiki stores the password hash used to initially create the account. So there is probably a higher number of users here who were notified, than on some of the other wikis.
 
 
 
That's odd, Chris - I distinctly remember that I could not log in to either 2013 or 2014 Wikimania wikis but was required to create a new account. Perhaps that was before SUL2?

Most likely.. we just rolled out SUL2 [1] in July, so most users probably had the same experience you did when using the 2013 site. Hopefully for 2014, everything will just work for most users.
 
 
Risker/Anne

_______________________________________________
Wikimania-l mailing list
Wikimania-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimania-l


[1] - SUL2: Updates to how CentralAuth logs users in across projects, part of https://www.mediawiki.org/wiki/Auth_systems project