Page MenuHomePhabricator

Security review of apache/avro and nmred/kafka-php
Closed, ResolvedPublic

Event Timeline

csteipp claimed this task.
csteipp raised the priority of this task from to Needs Triage.
csteipp updated the task description. (Show Details)

@EBernhardson, what dependencies / timelines do you have for this library?

This is a dependency for being able to easily analyze the logs generated by search, currently they are ~30GB per day. This will allow us to put them into hadoop which is better equipped to handle the volume of data.

There is no hard timeline on this. It's not blocking anything in particular, it will just allow us more visibility into the data we already collect and allow the two search analysts to do more in less time.

Legoktm added a project: MediaWiki-Vendor.
Legoktm set Security to None.

Could you give an estimate on where this fits into the security team's timeline so we can plan appropriately?

Probably the week of week of Aug 31st, realistically.

@csteipp: My understanding is that there was some follow-up work related to this. Can you mention those tasks here so I can follow them?

@ksmith, I -1'ed https://gerrit.wikimedia.org/r/#/c/232075/ for bundling potentially dangerous example code with the library. How the team wants to handle that is up to them-- they should add blockers here as needed.