[Labs-l] [Labs-announce] [notice] DB replicas user_properties view redaction

Chase Pettet cpettet at wikimedia.org
Mon Nov 28 20:02:58 UTC 2016


Concerns have been raised about (some) user information available via the
Labs DB replicas.

On review, these properties have been deemed sensitive by our security
folks:

user_properties: language, skin, timecorrection, varient

I have amended the views to remove these properties.

We (Labs admins) are available to help explain this change, and concerns
can be raised by contacting security at wikimedia.org

-- 
Chase Pettet
Engineering Manager -- Labs
chasemp on phabricator <https://phabricator.wikimedia.org/p/chasemp/> and
IRC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20161128/779a7ff7/attachment.html>
-------------- next part --------------
_______________________________________________
Labs-announce mailing list
Labs-announce at lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/labs-announce


More information about the Labs-l mailing list