[Wikimedia-l] PRISM

[Craig Franklin]

I'd suggest that while Wikimedia projects are somewhat less susceptible to
PRISM-style snooping, simply because we're not a communications medium like
Google or Facebook are.  However, there is plenty of non-public information
that could be of interest:

- The IP addresses and identities of logged on users
- Server logs (including logs of users who use the https version of the
sites)
- Times, dates, and possibly contents of emails sent through the "Email
this user" functionality
- Other information that is not kept at the application (MediaWiki) layer,
but possibly could be logged at the database or OS layers.

I wouldn't say that there's nothing to worry about, but at the same time I
doubt we're near the top of the spooks' priority list.

Cheers,
Craig Franklin


On 10 June 2013 13:05, Anthony <wikimail at inbox.org> wrote:

> On Sun, Jun 9, 2013 at 10:53 PM, Benoit Landry <benoit_landry at hotmail.com
> >wrote:
>
> > What "information" could the WMF disclose that isn't already available to
> > some volunteers anyhow?
>
>
> I don't know what information "some volunteers" have access to, who
> qualifies as "some volunteers" (does the board qualify?), or why it matters
> whether or not a person is a volunteer.
>
> By access logs I meant HTTP access logs.  It's pretty clear that without
> taking extraordinary measures, what you're editing is not anonymous.  But
> some people are probably under the impression that what they're reading and
> searching (and linking from) is private.
>
> The IP addresses of logged-in editors are visible to volunteer CUs;
>
>
> En-masse, or one-request-at-a-time?
>
> deleted revisions and log entries are visible to all volunteers admins.
> > Wikipedia's inherently a pretty transparent system...
> >
>
> Transparent?
> _______________________________________________
> Wikimedia-l mailing list
> Wikimedia-l at lists.wikimedia.org
> Unsubscribe: https://lists.wikimedia.org/mailman/listinfo/wikimedia-l
>