[Labs-l] [Labs-announce] [notice] DB replicas user_properties view redaction

[Chase Pettet]

Hi Jonathan,

My working assumption is if either party has a substantial objection to
revealing data it will not be disclosed. Both have their own independent
reasoning process and discernment on the risk of the same PII.  Two "Yes's"
is a "Yes", but one "No" is always a "No" and all that.

Cheers,

Chase Pettet

On Tue, Nov 29, 2016 at 1:09 PM, Jonathan Morgan <jmorgan at wikimedia.org>
wrote:

> Out of curiosity (not snark), who has final say on these matters:
> Security, or Legal?
>
> - J
>
> On Tue, Nov 29, 2016 at 8:17 AM, Chase Pettet <cpettet at wikimedia.org>
> wrote:
>
>> Hey Marc (how's it going?)
>>
>> Bugzilla 58196 became https://phabricator.wikimedia.org/T60196
>>
>> Thanks for calling that out, I didn't know some of the backstory.
>>
>> Members of the Security team made the call on removal and I will let them
>> speak for themselves on rationale. At the moment, the task for this is
>> protected by policy  (due to the mentioned privacy concerns)
>> https://phabricator.wikimedia.org/T150679 but I believe you are able to
>> access it to engage with questions.
>>
>>
>> On Tue, Nov 29, 2016 at 10:09 AM, Marc-Andre <marc at uberbox.org> wrote:
>>
>>> Hey Chase,
>>>
>>> On 2016-11-28 03:02 PM, Chase Pettet wrote:
>>>
>>> On review, these properties have been deemed sensitive by our security
>>> folks:
>>>
>>> user_properties: language, skin, timecorrection, varient
>>>
>>>
>>> Perhaps "our security folk" should make up their mind?
>>>
>>> That list was specifically approved by legal as okay.  See
>>> https://phabricator.wikimedia.org/T66115 and the (long, involved) prior
>>> discussion leading to it at bz 58196 (did we keep an archive of those)?
>>>
>>> -- Coren / Marc
>>>
>>>
>>> _______________________________________________
>>> Labs-announce mailing list
>>> Labs-announce at lists.wikimedia.org
>>> https://lists.wikimedia.org/mailman/listinfo/labs-announce
>>>
>>>
>>
>>
>> --
>> Chase Pettet
>> Engineering Manager -- Labs
>> chasemp on phabricator <https://phabricator.wikimedia.org/p/chasemp/>
>> and IRC
>>
>> _______________________________________________
>> Labs-announce mailing list
>> Labs-announce at lists.wikimedia.org
>> https://lists.wikimedia.org/mailman/listinfo/labs-announce
>>
>>
>
>
> --
> Jonathan T. Morgan
> Senior Design Researcher
> Wikimedia Foundation
> User:Jmorgan (WMF) <https://meta.wikimedia.org/wiki/User:Jmorgan_(WMF)>
>
>
> _______________________________________________
> Labs-l mailing list
> Labs-l at lists.wikimedia.org
> https://lists.wikimedia.org/mailman/listinfo/labs-l
>
>


-- 
Chase Pettet
Engineering Manager -- Labs
chasemp on phabricator <https://phabricator.wikimedia.org/p/chasemp/> and
IRC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-l/attachments/20161130/51045ccf/attachment-0001.html>