Hey Craig,

We're hoping to get the stop-gap in place within the week. Longer term... it's difficult to say. It's deep enough that we're not entirely sure we can 'fix' the extension but will look into that in addition to other options and other tools.

James Alexander
Manager
Trust & Safety
Wikimedia Foundation
(415) 839-6885 x6716 @jamesofur

On Mon, Sep 28, 2015 at 4:52 PM, Craig Franklin <craig.franklin@wikimedia.org.au> wrote:
Hi Floor,

Is there any ETA on when we can expect this remedial work to be completed?

Regards,
Craig Franklin

2015-09-29 8:09 GMT+10:00 Floor Koudijs <fkoudijs@wikimedia.org>:
Dear Filip,

I am so very sorry to hear about these frustrations with the deployment of the Education Extension. The problem is that there have been recent security issues with the extension. Engineering and our Trust & Safety department are working on some stop gaps to allow the extension to remain in place (and likely be deployed) while we determine what to do with the recent security issues. 

Please rest assured that we are working hard both on keeping the Education Extension going, and on thinking about a better tool to replace it for the future. 

Feel free to follow up if you have any further questions. I've cc-ed James Alexander here.

Best,


Floor Koudijs

Senior Manager, Wikipedia Education Program

Wikimedia Foundation

+1.415.839.6885  x6806 (landline)

+1.415.692.5289 (cell phone)

fkoudijs@wikimedia.org

education.wikimedia.org


On Mon, Sep 28, 2015 at 11:14 AM, Filip Maljkovic <dungodung@gmail.com> wrote:
Hello everyone,

Recently, a security issue has been found with Education extension. As a result, new requests for installing the extension on Wikimedia wikis are being "stalled", i.e. blocked for an indeterminate period. Can someone from the Foundation comment on this? I don't see why we shouldn't install the extension to more wikis, if the current installations are still working as-is (i.e. they're not being uninstalled because of the security issue, as far as I know).

While it might be a long shot, is it possible to influence this decision somehow?

I feel thoroughly disappointed, having held community discussion and vote, and then waiting for a month (!) for no apparent reason, just to be outright told that it's unlikely to happen anytime soon. [1]

[1] https://phabricator.wikimedia.org/T110619

Cheers,
Filip Maljković
Wikimedia Serbia

_______________________________________________
Education mailing list
Education@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/education


_______________________________________________
Education mailing list
Education@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/education