[Wikitech-l] WMF Exploits and MediaWiki

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 It seems like the subject as been brought up everywhere (such as English Wikipedia's Village Pump and a Wikinews talk page), but it hasn't been breached on wikitech-l yet. So that's what I'm going to do. It appears, from [[wikinews:Talk:Microsoft Windows metafiles are a vector for computer viruses]] that Commons accepts wmf files masquerading as ogg files. The security of MediaWiki installations on Windows platforms is also dubious. For information purposes, what are the developers doing about it? - -- Edward Z. Yang Personal: edwardzyang(a)thewritingpot.com SN:Ambush Commander Website: http://www.thewritingpot.com/ GPGKey:0x869C48DA http://www.thewritingpot.com/gpgpubkey.asc 3FA8 E9A9 7385 B691 A6FC B3CB A933 BE7D 869C 48DA