Reward who? How? With what? Why?
Based on https://github.com/bjeavons/zxcvbn-php/pull/32 (seems a mismatch with the dropbox js version as detailed in https://github.com/bjeavons/zxcvbn-php/issues/15 ) the upstream might not be very active, and it has actually been forked... https://github.com/mkopinsky/zxcvbn-php and https://packagist.org/packages/mkopinsky/zxcvbn-php
It's because it's something added in wmf-config
Sat, Dec 8
Fri, Dec 7
I guess it's very much a "no silver bullet" thing. Why Facebook, Google et al offer so many different options
There are "desktop" 2FA apps... I wonder if we should do a bit more research into them. Stuff that's desktop apps, browser extensions... that can also do 2FA code generations
https://blog.vasco.com/authentication/sms-authentication/ "NIST Softens Guidance on SMS Authentication" (about a year later)
As discussed on IRC.. If the tests are passing, at this point, it might be less disruptive to just leave the commits, not revert them, don't change the HEAD pointer.... And then at worse make a fix up commit ontop and push it via gerrit
Go forth and fix!
Do also note, a script is run at least monthly to recalculate the number of articles, so there can be weird jumps occasionally depending on changes done to a page
For EducationProgram the extension is undeployed, so for all intents and purposes as you say, you don't need to do anything with it
Isn't this expected behaviour and you just need to json_decode() (in PHP for example) the output
Thanks for the report. Unfortunately MediaWiki 1.29 is unsupported since September 2018. See https://www.mediawiki.org/wiki/Version_lifecycle for more information
What do you think the count should be?
Thu, Dec 6
We have implementations, but often google type dependencies....
And for your bullet points, we can hopefully grab the little improvements in point releases in the near future
My thinking right now is that we somehow/somewhere declare that Guzzle isn't part of the stable interface, and extensions need to use the MW abstraction layer instead (this seems like a good idea regardless given T202143#4802539). Does that seem reasonable?
Ideally, IMHO, being able to do a device swap without disabling and re-enabling should be in there too (not sure where the task is for that straight off)
? How long? 10 characters?
Wed, Dec 5
Pretty sure it’s waiting for review (from security too)
Making MW have sane defaults and follow best practices doesn't/shouldn't really need much approval. It's trivially easy to disable it people so desire
Tue, Dec 4
Easy to fix...
Looks like some possible test failures in core that need addressing, but that's irrelevant to this review
No longer blocked by T202143: Security review for Guzzle 6.3.3
I'm happy for this to go ahead.
So doing some poking around here... We end up with a few extra other libraries, which is fine, just a bit more poking around needed.
Sorry for the delay @Raystorm I've been travelling
Mon, Dec 3
Sun, Dec 2
It's responding like your account is "missing" on testwiki
Sat, Dec 1
We currently don't really have a place for logging sensitive stuff like this stuff onwiki (and then replicating to labs adds some complexity). And I don't think it should be public to the masses that a user has disabled 2FA for another user for obvious reasons
That’s what degrade/temp remove means. Make MW do it on the fly, not actually removing the membership
As with all wikis, things take a little time to be processed by the job runners. Changes wouldn't appear immediately, but if they're still not appearing automatically after a reasonable amount of time, there's potentially an issue to look at
We don't use $wgJobRunRate on WMF wikis...
Fri, Nov 30
@bd808 per your comment on the other bug...
Thu, Nov 29
Reverted due to some monolog (or our additional functions) issues
Same IP going back, 184.108.40.206
Wed, Nov 28
Tue, Nov 27
If there is a button to remove a single item in the list, why not a button for the entire list?
Mon, Nov 26
Thu, Nov 22
Unless I’ve missed something... where are we proposing to stop lowercase only passwords?
Tue, Nov 20
Sun, Nov 18
Sat, Nov 17
Fixed by changing the content model to something else and back again... We get a few of these weird edge cases from time to time
Thu, Nov 15
It errored trying to create them due to T209483: Got connection to 'yuewiktionary', but expected local domain ('aawiktionary').