Thanks, John. Fae, I suggest that we let the WMF folks who are working on this issue extinguish the current fire before asking them to write a report about a previous one. I agree that the report about the previous incident is overdue. Perhaps as the current situation becomes calmer (updated metrics and news would be nice to have on the public Phab tickets) some staff can be moved off of the front line and back to the archives. Pine ( https://meta.wikimedia.org/wiki/User:Pine ) null
I get hundreds of these a year (my user name, Nathan, seems to be a popular target). It would nice to be able to use some sort of multi-factor authentication, which is actually supported by OAUTH. However, it seems most projects (including en.wp) restrict use to accounts with elevated rights. Can anyone explain why these tools can't be made more widely accessible?
On Sun, May 6, 2018 at 1:24 AM Pine W wiki.pine@gmail.com wrote:
Thanks, John. Fae, I suggest that we let the WMF folks who are working on this issue extinguish the current fire before asking them to write a report about a previous one. I agree that the report about the previous incident is overdue. Perhaps as the current situation becomes calmer (updated metrics and news would be nice to have on the public Phab tickets) some staff can be moved off of the front line and back to the archives. Pine ( https://meta.wikimedia.org/wiki/User:Pine ) null _______________________________________________ Wikimedia-l mailing list, guidelines at: https://meta.wikimedia.org/wiki/Mailing_lists/Guidelines and https://meta.wikimedia.org/wiki/Wikimedia-l New messages to: Wikimedia-l@lists.wikimedia.org Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l, mailto:wikimedia-l-request@lists.wikimedia.org?subject=unsubscribe
On Sun, May 6, 2018 at 11:24 PM Nathan nawrich@gmail.com wrote:
I get hundreds of these a year (my user name, Nathan, seems to be a popular target). It would nice to be able to use some sort of multi-factor authentication, which is actually supported by OAUTH. However, it seems most projects (including en.wp) restrict use to accounts with elevated rights. Can anyone explain why these tools can't be made more widely accessible?
Lack of usability around recovering a lost second factor (and not losing it in the first place) AIUI. Right now only developers can reset the second factor; that does not scale to all Wikimedia editors.
wikimedia-l@lists.wikimedia.org