…
Thanks,
Mike
On 3 Oct 2013, at 21:43, Chris Steipp <csteipp(a)wikimedia.org> wrote:
On Thu, Oct 3, 2013 at 10:06 AM, Risker <risker.wp(a)gmail.com> wrote:
Please note that it is especially important to change your passwords on the Wikimania
wikis where you have accounts. These are non-SUL wikis and changing your SUL password
will not effect a change on the Wikimania 2013 and 2014 wikis. Even if you never intend
to edit those wikis again, your password and account could still hypothetically be
compromised.
wikimania2013.wikimedia.org and
wikimania2014.wikimedia.org are both part of SUL, so most
users should use their CentralAuth account to login. They are slightly odd in that we
don't give you a cookie for those sites when you initially login on another wiki, but
with SUL2, you *should* get logged in when you visit the site.
However, since SUL2 is relatively new, and you wouldn't get automatically logged in
when visiting the site with the original SUL, I'm guessing many users visited the
wikimania sites for the first time, logged in with their centralauth username and
password, and continued on their way, which is one of the conditions where the local wiki
stores the password hash used to initially create the account. So there is probably a
higher number of users here who were notified, than on some of the other wikis.
I agree with others that the risk is very, very small; nonetheless, it is not
non-existent.
Totally agree.
Risker/Anne
_______________________________________________
Wikimania-l mailing list
Wikimania-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikimania-l