Am Dienstag, 11. Juni 2013, 14:42:36 schrieb Chad:
Indeed, it'd be pretty hard to do. Since we use git, anyone trying to sneak something in would break history and likely get noticed.
That is not entirely true. Considering the live website is at best a git clone and not the main git repo (or just an automatic mirror of the git sources), all you'd need to get is access to the server, and secretly modifying the live sources. You could also set up a git merge hook, where git are pulled and on top of that applies your backdoor again, so the sysadmins won't notice in first place. No git commits involved here. Just food for thoughts ;)
-Chad
On Jun 11, 2013 2:34 PM, "Brion Vibber" brion@pobox.com wrote:
Did you mean to post this on Wikimedia-l? Probably a bit offtopic for the software list. :)
(And no, MediaWiki does not contain any NSA backdoors. But for all you know, your server's BIOS might!)
-- brion
On Tue, Jun 11, 2013 at 11:20 AM, Fred Bauder <fredbaud@fairpoint.net
wrote: We can guess, of course, and some of us are very good guessers, but
here:
http://www.scientificamerican.com/article.cfm?id=5-basic-unknowns-nsa-blac k-hole-prism>
Fred
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l
MediaWiki-l mailing list MediaWiki-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/mediawiki-l