Fair enough about the security issues. I wouldn't trust me either if I knew nothing about me, lol. That said, if there are some less critical things that you can get me access to that are also important to wikimedia let me know, so that I can still contribute in some technically significant way.
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Monday, 17 December 2018 12:16, Derk-Jan Hartman d.j.hartman+wmf_ml@gmail.com wrote:
Hi Alexander,
I haven't forgotten about your request... Please don't take this the wrong way, but lately there has been quite a LOT of malicious activity at several Wikimedia systems and your account is brand new.. I can't find any history of your activity with the projects or any other projects in any public form... Especially in light of the recent event-stream compromise for instance (https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d086055...), I think it is wise of us to be extra careful and take some more time to make sure your enthusiasm is exactly what it is pure enthousiasme to become part of this. But at this time that makes me uncomfortable to give you access to this set of servers as one of them is actually rather critical and could allow a person to do a lot of potential harm to Wikimedians. It is sad that we have to consider these kinds of things nowadays. I'm considering how we should approach this and how I can gain enough confidence to help you along.
DJ
On Fri, Dec 14, 2018 at 7:50 PM Alexander Vassilevski alexander@vassilevski.com wrote:
OK. Thanks for letting me know that. It looks like I've been declined but at least I'm getting some idea on how things work around here...
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Friday, 14 December 2018 10:35, Brian Wolff bawolff@gmail.com wrote:
That is the process for getting shell access on production [e.g. servees directly running Wikipedia]. Which is rather different (and much harder) than getting access to an abandoned tool.
-- brian
On Friday, December 14, 2018, Alexander Vassilevski alexander@vassilevski.com wrote:
I created a task in phab to be added to NDA ldap, so I can sign the NDA and get shell access: https://phabricator.wikimedia.org/T211996 One of the subtasks (from https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_a... ) on this is to get
[ ] At least one comment of support from a Wikimedia Foundation employee, explaining why it is a good idea to accept your request [ ] A comment of approval from one Wikimedia Foundation manager (usually the manager of an employee supporting you). [ ] (Have someone with access double-check which mediawiki.org account that the manager's Phabricator account is linked to, where the SUL account was created, and how it was created on that wiki.)
Can someone do this? If you need to see some qualifications I can try to get some code of mine to you from some old puppet stuff I've done and I can show you my github, where you can see some of my code. If I'm making a rookie mistake here and this type of access is not needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me there too, I check it from time to time. alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:33, Alex Monk krenair@gmail.com wrote:
You'll basically need to create a wikitech account (if you don't already have one) and convince one of the existing project admins (listed at https://tools.wmflabs.org/openstack-browser/project/maps) to add you. Please use Puppet instead of manually setting up servers by hand.
On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski alexander@vassilevski.com wrote:
I have some free time this December and I could manually create the new vm's and replicate the configs/installs by hand on newly created Ubuntu 18 vm's ( after figuring out how the old ones are installed and configured and if given access, of course .. ).
Keep in mind that I'm new to wikimedia and don't know much about the infrastructure or procedures, so what do I need to do to be given access and volunteer to do this?
alexander@vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ On Thursday, 13 December 2018 12:09, Johan Jönsson jjonsson@wikimedia.org wrote:
> On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson jjonsson@wikimedia.org > wrote: > > > On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman < > > [[d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)](mailto:[d.j.hartman%2Bwmf_ml@gmail.com](mailto:d.j.hartman%252Bwmf_ml@gmail.com))> wrote: > > > > > Yeah might be wise to at least reach out to en.wp and de.wp. Or maybe Tech > > > News even ? > > > > "Hey folks, this might not work in the future" could be reason enough to > > include it in Tech News, yes. > > Included inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51 which is > going out to the wikis on Monday. > > //Johan Jönsson > > --------------------------------------------------------------------------------------------------------------------------- > > Wikitech-l mailing list > Wikitech-l@lists.wikimedia.org > https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikitech-l