Wikitech-l January 2017

wikitech-l@lists.wikimedia.org

85 participants
79 discussions

[SECURITY] Math extension - shell invocation followup
by Chad 23 Jan '17

23 Jan '17

Hi all, In the process of the previous security release, T124940 was fixed in core MediaWiki (it deals with unacceptably long shell inputs). There was also a related fix in Math that I just noticed had never been released--even thought it was disclosed (with a patch) on the task in question. It's been published to https://gerrit.wikimedia.org/r/#/c/333309/ (for master) and is being backported to all supported branches (1.28.x, 1.27.x, 1.23.x) This isn't an extension we bundle in core MW which explains the oversight. -Chad

3 2

Share your experience and feedback as a Wikimedian in this global survey
by Edward Galvez 21 Jan '17

21 Jan '17

Hello volunteer developers & technical contributors! The Wikimedia Foundation is asking for your feedback in a survey. We want to know how well we are supporting your contributions on and off wiki, and how we can change or improve things in the future.[1] The opinions you share will directly affect the current and future work of the Wikimedia Foundation. To say thank you for your time, we are giving away 20 Wikimedia T-shirts to randomly selected people who take the survey.[2] The survey is available in various languages and will take between 20 and 40 minutes. Use this link to take the survey now: https://wikimedia.qualtrics.com/SE/?SID=SV_6mTVlPf6O06r3mt&Aud=DEV&Src=DEV You can find more information about this project here[3]. This survey is hosted by a third-party service and governed by this privacy statement[4]. Please visit our frequently asked questions page to find more information about this survey[5]. If you need additional help or have questions about this survey, send an email to surveys(a)wikimedia.org. Thank you! Edward Galvez Survey Specialist, Community Engagement Wikimedia Foundation [1] This survey is primarily meant to get feedback on the Wikimedia Foundation's current work, not long-term strategy. [2]Legal stuff: No purchase necessary. Must be the age of majority to participate. Sponsored by the Wikimedia Foundation located at 149 New Montgomery, San Francisco, CA, USA, 94105. Ends January 31, 2017. Void where prohibited. Click here for contest rules. [3] About this survey: https://meta.wikimedia.org/wiki/Community_Engagement_ Insights/About_CE_Insights [4] Privacy statement: https://wikimediafoundation. org/wiki/Community_Engagement_Insights_2016_Survey_Privacy_Statement [5] FAQ: https://meta.wikimedia.org/wiki/Community_Engagement_ Insights/Frequently_asked_questions

2 1

Updated texvc (Math rendering) Debian packages now available
by Legoktm 21 Jan '17

21 Jan '17

Hi, texvc is a OCaml program that generates PNG images for the Math extension. Packages for Debian and Ubuntu are now available, please see <https://www.mediawiki.org/wiki/User:Legoktm/Packages/texvc> for more details. This package is useful regardless of whether you are using the mediawiki package or not - it allows you to use texvc without needing to install the full OCaml toolchain to build it manually. Finally, in the long term the Math extension maintainers would like to phase out texvc in favor of the mathoid-based code. If you do use texvc (packaged or not), your comments on <https://phabricator.wikimedia.org/T155201> would be appreciated. -- Legoktm

1 0

[SECURITY] CentralAuth - Tokens & apioutput.js
by Chad 21 Jan '17

21 Jan '17

Hi, This shouldn't affect very many installations as CentralAuth is very WMF-specific but letting everyone know that a fix for CentralAuth has just been released. It allowed user impersonation by a combination of the apioutput.js (used for api.php output customization) and the central auth cookie. The bug is: https://phabricator.wikimedia.org/T144573 The gerrit change is: https://gerrit.wikimedia.org/r/#/c/333316/ -Chad

1 0

Map replaces GeoHack on ruwiki
by Yuri Astrakhan 20 Jan '17

20 Jan '17

Russian Wikipedia just replaced all of their map links in the upper right corner (geohack) with the <maplink> - Kartographer extension! Moreover, when clicking the link, it also shows the location outline, if that object exists in OpenStreetMap, using corresponding Wikidata ID. My deepest respect to my former Interactive Team colleagues and volunteers who have made it possible! (This was community wishlist #21) Example - city of Salzburg (click coordinates in the upper right corner, or in the infobox): https://ru.wikipedia.org/wiki/%D0%97%D0%B0%D0%BB%D1%8C%D1%86%D0%B1%D1%83%D1…

2 1

Discovery Weekly Update for the week starting 2017-01-16
by Chris Koerner 20 Jan '17

20 Jan '17

Hello, Here are this past week's updates from the Discovery department. == Highlights == * Finalized the second BM25 testing analysis and linked to the pdf here. [0] ==Search == * Migrated Phan for CirrusSearch to Jenkins. (technical debt) [1] [2] * Finished writing up, summarizing, and recommending extensive changes to TextCat for language identification. [3] Overall improvement to F0.5 accuracy was a mean of just under 5% across the corpora from nine Wikipedias. The two worst performing corpora, from enwiki and nlwiki, each went up around 10%! All nine are now above 90% F0.5 score. Next step is to deploy the recommended changes. [4] * Completed (a round of) refactoring and cleanup of Special:Search code [5] [6] [0] https://www.mediawiki.org/wiki/Discovery_Analysis#Past_analyses [1] https://www.mediawiki.org/wiki/Continuous_integration/Phan [2] https://phabricator.wikimedia.org/T153040 [3] https://www.mediawiki.org/wiki/User:TJones_(WMF)/Notes/TextCat_Improvements… [4] https://en.wikipedia.org/wiki/F1_score [5] https://phabricator.wikimedia.org/T150217 [6] https://phabricator.wikimedia.org/T150390 ---- The archive of all past updates can be found on MediaWiki.org: https://www.mediawiki.org/wiki/Discovery/Status_updates Interested in getting involved? See tasks marked as "Easy" or "Volunteer needed" in Phabricator. [1] https://phabricator.wikimedia.org/maniphest/query/qW51XhCCd8.7/#R [2] https://phabricator.wikimedia.org/maniphest/query/5KEPuEJh9TPS/#R Yours, Chris Koerner Community Liaison - Discovery Wikimedia Foundation

1 0

Fwd: [Wikimedia Announcements] Invitation to WMF January 2017 Metrics & Activities Meeting: Thursday, January 26, 19:00 UTC
by Pine W 20 Jan '17

20 Jan '17

Forwarding from WikimediaAnncounce-l to Wikimedia-l because auto-foward is still not working. Also forwarding to Wikitech-l and MediaWiki-l because the "Reconstructing MediaWiki history" presentation sounds like it may be of interest to some people on those lists. Pine ---------- Forwarded message ---------- From: Lena Traer <ltraer(a)wikimedia.org> Date: Thu, Jan 19, 2017 at 4:41 PM Subject: [Wikimedia Announcements] Invitation to WMF January 2017 Metrics & Activities Meeting: Thursday, January 26, 19:00 UTC To: wikimediaannounce-l(a)lists.wikimedia.org Hello everyone, The next Wikimedia Foundation metrics and activities meeting will take place on Thursday, January 26, 2017 at 7:00 PM UTC (11 AM PST). The IRC channel is #wikimedia-office on irc.freenode.net, and the meeting will be broadcast as a live YouTube stream. The theme of the January meeting is: "Building our future” – Exploring how we can build for the future of the Wikimedia movement together. Meeting agenda: * Welcomes, theme introduction * Movement update * Reconstructing MediaWiki history * Community capacity development * Executive update * Questions and discussion * Wikilove Please review https://meta.wikimedia.org/wiki/Wikimedia_Foundation_metrics_and_activities_ meetings for further information about the meeting and how to participate. We’ll post the video recording publicly after the meeting. Thank you, Lena Lena Traer Project Assistant // Communications // Advancement Wikimedia Foundation 149 New Montgomery Street San Francisco, CA 94105 _______________________________________________ Please note: all replies sent to this mailing list will be immediately directed to Wikimedia-l, the public mailing list of the Wikimedia community. For more information about Wikimedia-l: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l _______________________________________________ WikimediaAnnounce-l mailing list WikimediaAnnounce-l(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikimediaannounce-l

1 0

catching errors in local JavaScript
by Amir E. Aharoni 19 Jan '17

19 Jan '17

Hallo Wikitech community, Remind me please, were there ever any efforts to get client-side JavaScript errors monitored centrally? What happens currently is that JS code can frequently fail, taking down the rest of JS on the page with it. It happens both with JS code properly deployed from Gerrit and loaded by RL, but even more so with local gadgets, Common.js, and user scripts. The most frequent effects of this into which I ran are Visual Editor not working at all and WikiEditor's toolbar not appearing in the source editing window. There are many more. On projects with a lot of editors and administrators, like the English and the German Wikipedia, this will probably be quickly noticed and fixed—sometimes fixed locally, and sometimes fixed in Gerrit and deployed in SWAT. But in smaller projects it can fail for months without being noticed. And when I say "smaller", I don't mean the tiny projects with almost no editors—such a thing happened recently in the Japanese Wikipedia, a top-10 project, and I helped administrators there to fix the buggy code, which appeared in the second most-popular gadget. I did this dozens of times, and Krinkle probably does this even more than me. Often admins from different projects help each other, and it is great that we have this mutual help in the community, but aren't there better ways to catch such errors? I remember there were discussions about this, but I don't remember what was the outcome. -- Amir Elisha Aharoni · אָמִיר אֱלִישָׁע אַהֲרוֹנִי http://aharoni.wordpress.com ‪“We're living in pieces, I want to live in peace.” – T. Moore‬

7 8

Minor change to SWAT windows
by Greg Grossmeier 19 Jan '17

19 Jan '17

tl;dr: I have removed the Tuesday 19:00 UTC SWAT window from the deployment calendar due to conflicts. Pick one of the other 11 SWAT windows. The (current) Tuesday 19:00 UTC SWAT window is directly before the 20:00 UTC MediaWiki train window. The nature of SWAT windows meant that the state of the deployed MW+Extension+Config code was changing while the creation of the new MW train version (eg: 1.29-wmf.8) was happening. This causes delays and confusion. The simple solution is to not have a normal SWAT window at that time. Other deploys (eg Services) are fine to happen at that time which is why I didn't just extend the MW train window to include that earlier hour. Luckily, you still have 11 SWAT windows to choose from. :) Greg -- | Greg Grossmeier GPG: B2FA 27B1 F7EB D327 6B8E | | Release Team Manager A18D 1138 8E47 FAC8 1C7D |

1 0

[Wikimedia Labs][Announce] NFS (only labs projects) maintenance on 2017-01-18
by Madhumitha Viswanathan 19 Jan '17

19 Jan '17

Hello, Continuing the storage redundancy and reliability efforts for Labs ( https://phabricator.wikimedia.org/T126083), the final migration to the new NFS storage cluster for Labs projects with NFS enabled is upcoming. The migration is planned to happen 2017-01-18 starting 09:00 PST(16:00 UTC). This *does not* affect tools, maps or any other projects that don't have /home or /data/project mounted. The migration window is expected to be fairly short (<3 hours) - but could last up to 6 hours. During the migration, no new data will be written to NFS (/home or /data/project), but existing data will be accessible in Read-only mode for the most part. Post migration, any services or jobs that were running on top of NFS (/home or /data/project) will require manual restarts. Jobs running on top of /scratch or /public/dumps will be unaffected. I will keep the lists and #wikimedia-labs updated on progress during and after the migration. The list of labs projects that will be affected in this migration are: - catgraph - account-creation-assistance - contributors - wikidata-topicmaps - sugarcrm - wikidumpparse - video - openstack - testlabs - wikidata-dev - quarry - huggle - editor-engagement - utrs - wmt - cvn - fastcci - toolsbeta - project-proxy - dumps - bots - snuggle - math - wikisource-tools The tracking task on phabricator is here - https://phabricator.wikimedia.org/T154336. Let us know if you have any questions or concerns on the list or on #wikimedia-labs. -- Madhu Viswanathan Operations Engineer, Wikimedia Labs

1 6

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

Wikitech-l January 2017