A scenario where the password database is compromised (e.g. sql injection, tool labs config messed up), but PrivateSettings.php is not compromised, is not unrealistic. Encrypting the passwords with some sort of stored secret could help in such a situation.

Related Objects

Mentioned In: T145915: OATHAuth OTP shouldn't be stored in cleartext in the DB

Event Timeline

Bawolff created this task.Nov 23 2015, 10:15 PM

Bawolff raised the priority of this task from to Needs Triage.

Bawolff updated the task description. (Show Details)

Bawolff added a project: Security-Team.

Bawolff subscribed.

Restricted Application added subscribers: StudiesWorld, Aklapper. · View Herald TranscriptNov 23 2015, 10:15 PM

• csteipp subscribed.Nov 24 2015, 1:12 AM

Totally agree on this. I've been working on a secret-sealing patch, to generically encrypt sensitive stuff when we store it (e.g., in memcache, but it would work for this, and user tokens too). I'll see if I can get that finished and published.

Legoktm subscribed.Nov 24 2015, 4:49 PM

Tgr mentioned this in T145915: OATHAuth OTP shouldn't be stored in cleartext in the DB.Dec 21 2017, 5:16 AM

Bawolff edited projects, added: MediaWiki-User-management, Security-team-backlog; removed: Security-Team.Sep 4 2018, 3:32 PM

MGChecker subscribed.Nov 2 2018, 8:37 AM

• TBolliger moved this task from Backlog to Other on the MediaWiki-User-management board.Nov 2 2018, 4:13 PM

Xaosflux subscribed.Mar 14 2019, 8:45 PM

• chasemp edited projects, added: Security-Team; removed: Security-team-backlog.Dec 23 2019, 5:12 PM

• chasemp moved this task from Incoming to Back Orders on the Security-Team board.

• chasemp triaged this task as Medium priority.Dec 23 2019, 5:19 PM

DannyS712 subscribed.Feb 15 2020, 10:24 AM

Reedy removed a project: Security-Team.Sep 2 2021, 4:43 PM

Tgr closed this task as a duplicate of T150647: Deploy EncryptedPassword to Wikimedia Sites.Jul 14 2023, 6:04 AM