Page MenuHomePhabricator
Create Task
Maniphest T337695

Security Issue Access Request for Bawolff
Closed, ResolvedPublic
Actions

Assigned To
mmartorana
Authored By
Bawolff
May 29 2023, 6:18 PM
Tags
Referenced Files
F37084335: Screenshot 2023-05-30 at 9.03.43 AM.png
May 30 2023, 2:05 PM
Subscribers
Aklapper
Bawolff
sbassett
Tokens
"Like" token, awarded by sbassett."Like" token, awarded by DAlangi_WMF."Like" token, awarded by Legoktm.

Description

Phabricator Username: Bawolff

Reasons For Request: Lately I've become more involved in MediaWiki community again. I want to help out with security issues, particularly in third party extensions, where the authors may not have the same knowledge as WMF employees and may need help and advice in fixing security issues. More generally I think i can positively contribute to security bugs.

I have already signed L2 back in may 2015.Previous request as a volunteer at T100380 [My access was later removed when I left the foundation and was offboarded]. I have 2FA enabled.

Related Objects

Event Timeline

Bawolff created this task.May 29 2023, 6:18 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptMay 29 2023, 6:18 PM
Legoktm awarded a token.May 29 2023, 11:22 PM
sbassett subscribed.EditedMay 30 2023, 2:05 PM

Verified MFA:

Screenshot 2023-05-30 at 9.03.43 AM.png (52×472 px, 12 KB)

This is obviously fine as long as we confirm that WMF-Legal is ok with the NDA still being valid.

Bawolff added a comment.May 30 2023, 2:49 PM

Happy to sign a new nda if neccessary.

DAlangi_WMF awarded a token.May 30 2023, 2:56 PM
sbassett assigned this task to mmartorana.May 30 2023, 5:26 PM
sbassett moved this task from Incoming to In Progress on the Security-Team board.
sbassett added a project: SecTeam-Processed.
mmartorana changed the task status from Open to In Progress.May 31 2023, 4:17 PM
mmartorana triaged this task as Medium priority.
mmartorana added a comment.Jun 20 2023, 5:31 PM

Hi @Bawolff - Apologies for the delay; I'm currently collaborating with WMF-Legal and talent&culture to resolve this matter.

I will let you know.

Thanks

mmartorana added a comment.Jul 10 2023, 4:35 PM

Hi @Bawolff - In order to prepare a new NDA, we need certain personal details from you, such as your full name, your email and mailing address. Kindly inform us about your preferred method of sharing this information with us, whether it be via email, chat, telephone, or any other means.

Thank you.

Bawolff added a comment.Jul 10 2023, 6:07 PM

Email is easiest. What address should i send this to?

mmartorana added a comment.Jul 19 2023, 4:38 PM

Hi @Bawolff - Please share the details to: kfrancis@wikimedia.org.

Bawolff added a comment.Jul 21 2023, 7:57 PM

New nda has been signed

sbassett closed this task as Resolved.Jul 25 2023, 1:37 PM
sbassett moved this task from In Progress to Our Part Is Done on the Security-Team board.
In T337695#9035281, @Bawolff wrote:

New nda has been signed

I've added you to acl*security_volunteer. @mmartorana can double-confirm the NDA when he's back next week.

mmartorana added a comment.Jul 31 2023, 4:14 PM

Hi - After consulting with the legal team, I can confirm that a new NDA has been signed.

sbassett awarded a token.Jul 31 2023, 4:14 PM
Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits