Page MenuHomePhabricator

[Session] Responsible Use of Infrastructure: Workshop
Closed, ResolvedPublic

Description

  • Title of session: Responsible Use of Infrastructure: Workshop
  • Session description: This session will provide an opportunity to continue the conversation from the Responsible Use of Infrastructure session. We will answer any remaining questions from the previous session, then break into groups to discuss community expectations, developer impact and traffic attribution.
  • Username for contact: JTweed-WMF
  • Session duration (up to 90min): 45 min
  • Session type (presentation, workshop, discussion, etc.): Workshop
  • Language of session (English, Arabic, etc.): English
  • Prerequisites (some Python, etc.): None, but ideally familiar with WE5 in the upcoming annual plan or attended previous session
  • Any other details to share?: JTweed-WMF is available all weekend to talk about developer authentication more broadly and discuss any feedback or ideas for improvement
  • Interested? Add your username below:

Etherpad: https://etherpad.wikimedia.org/p/WMHack25__Responsible_Use_of_Infrastructure
Notes: See https://phabricator.wikimedia.org/T392904

Event Timeline

Workshop task

Split into three groups:

  • Community concerns
  • Developer impact
  • Traffic attribution

Discuss your topic as a group and use the post-its to document, then nominate someone to give a 2-3 min summary of your discussion.

Group 1: Community concerns

Explore potential areas of concern or risk, thinking about what we need to do to ensure we meet the expectations of the community.

  • What potential concerns do you have with this work?
  • How should we address these concerns?
  • What are community expectations around responsible use?
  • How do we make sure we meet these expectations?

Group 2: Developer impact

Explore the technical considerations around implementing authentication, including the impact it has on tools and developers.

  • What authentication methods should we support?
  • What is your preferred authentication method?
  • What impact does requiring auth have on developers?
  • Are there any situations where auth is not desirable?

Group 3: Traffic attribution

Discuss the proposed attribution groups and whether they provide an appropriate basis for rate limiting programmatic access.

  • What attribution should be required to get a higher limit?
  • Can we achieve attribution without requiring authentication?
  • Should rate limits apply to applications or individual users?
  • What rate limits are appropriate for each level of access?
debt triaged this task as Medium priority.May 2 2025, 12:29 PM
debt moved this task from Backlog to Scheduled Sessions on the Wikimedia-Hackathon-2025 board.
CBogen updated the task description. (Show Details)