Xaosflux (Xaos Flux)
Executive

Projects

User does not belong to any projects.

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Friday

  • Clear sailing ahead.

User Details

User Since
Nov 2 2014, 4:13 PM (197 w, 3 d)
Availability
Available
IRC Nick
xaosflux
LDAP User
Unknown
MediaWiki User
Xaosflux [ Global Accounts ]

Recent Activity

Sun, Aug 5

Xaosflux added a comment to T200176: Deletion of user js and css requires deletion and edituser* rights.

As there is already special checks in place for userjs/usercss could this also allow for deletion - as the mediawiki namespace normally has its own protection it won't allow arbitrary creation (unlike userspace).

Sun, Aug 5, 9:47 PM · Security-Core, MediaWiki-User-management, Security
Xaosflux added a comment to T190015: Create separate user group for editing sitewide CSS/JavaScript that does not include administrators by default.

@Tgr agree it could be desirable - please correct me if I'm wrong but after this change this scenario is created:

Sun, Aug 5, 9:28 PM · MW-1.32-release-notes (WMF-deploy-2018-07-24 (1.32.0-wmf.14)), User-Tgr, Trust-and-Safety, Wikimedia-General-or-Unknown, Patch-For-Review, Security, JavaScript, Security-Core
Xaosflux added a comment to T190015: Create separate user group for editing sitewide CSS/JavaScript that does not include administrators by default.

Followup #2: Will global renamer's that are not local interface admins still be able to move user .js/.css subpages? If not, how will these fail?

Sun, Aug 5, 7:43 PM · MW-1.32-release-notes (WMF-deploy-2018-07-24 (1.32.0-wmf.14)), User-Tgr, Trust-and-Safety, Wikimedia-General-or-Unknown, Patch-For-Review, Security, JavaScript, Security-Core
Xaosflux added a comment to T190015: Create separate user group for editing sitewide CSS/JavaScript that does not include administrators by default.

Following up on discussion from enwiki: Will local sysops's still be able to delete css/js pages if they are not also able to edit them?

Sun, Aug 5, 7:29 PM · MW-1.32-release-notes (WMF-deploy-2018-07-24 (1.32.0-wmf.14)), User-Tgr, Trust-and-Safety, Wikimedia-General-or-Unknown, Patch-For-Review, Security, JavaScript, Security-Core

Fri, Jul 27

Xaosflux added a comment to T197087: Remove or limit edituserjs and similar rights.

With this being removed from sysop, is it actually also being ADDED to techadmin - or will it be orphaned?

Fri, Jul 27, 8:24 PM · MediaWiki-Interface, Security-Core

Fri, Jul 20

Xaosflux added a comment to T125723: Create an 'ARTICLE_LASTXH_CONTRIBUTORS' function.

This sounds like a very expensive way to run filters, how would it scale? Can someone show a mockup filter for when there are an example 10 different pairs of these restrictions? Or would you implement a separate filter for each group? This also doesn't seem to address discussion type pages - perhaps more filters for that?

Fri, Jul 20, 1:05 PM · AbuseFilter

Wed, Jul 18

Xaosflux added a comment to T186325: Retaining data for courses organized through the extension during and after deprecation period.

@TheDJ regarding pages like Special:CampusVolunteers, T45931 suggests these profiles are somehow being hidden - they also don't appear to be removable or editable by admins, making them problematic.

Wed, Jul 18, 7:34 PM · MediaWiki-extensions-EducationProgram
Xaosflux added a comment to T190015: Create separate user group for editing sitewide CSS/JavaScript that does not include administrators by default.

@Tgr if communities need to opt-in to enable this of their bureaucrats the project level RfCs may take some time (a month is not unusual for a project like enwiki) - as the final specification for what access is being removed from sysop, and which access is being included by default in local-interfaceadmin ?

Wed, Jul 18, 11:36 AM · MW-1.32-release-notes (WMF-deploy-2018-07-24 (1.32.0-wmf.14)), User-Tgr, Trust-and-Safety, Wikimedia-General-or-Unknown, Patch-For-Review, Security, JavaScript, Security-Core

Jul 9 2018

Xaosflux added a comment to T153454: Enable BotPasswords (or similar feature) for web/interactive access.

@Ajraddatz my hopes would be that it would be like botpasswords, where basically you could log on with multiple passwords if you opt in to it, and when you opt in to it you can choose what access is available under your opt. You could lock certain passwords to certain IP's, make some edit-only, etc. Put everything entirely in control of the editor.

Jul 9 2018, 9:42 PM · Security-General, User-Urbanecm, MediaWiki-Authentication-and-authorization

Jul 8 2018

Xaosflux added a comment to T198961: Watchlist on meta wiki not displaying changes until "show" button is clicked.

See also T176033

Jul 8 2018, 12:58 AM · Growth-Team, MediaWiki-Watchlist

Jul 3 2018

Xaosflux changed the status of T85393: Alert users when performing restricted actions with Special:MovePage from Open to Stalled.
Jul 3 2018, 1:25 AM · MediaWiki-Page-editing, MediaWiki-Special-pages

Jul 2 2018

Xaosflux added a comment to T198651: Abuse filter log is showing wrong information.

Possibly related to T173977 ?

Jul 2 2018, 8:16 PM · Patch-For-Review, AbuseFilter
Xaosflux created T198651: Abuse filter log is showing wrong information.
Jul 2 2018, 8:12 PM · Patch-For-Review, AbuseFilter

Jul 1 2018

Xaosflux closed T197860: Special:Userrights does not display temporary groups if the user is in no non-temporary, non-automatic groups as Resolved.
Jul 1 2018, 4:29 AM · Patch-For-Review, MediaWiki-Platform-Team (MWPT-Q4-Apr-Jun-2018), MediaWiki-Special-pages
Xaosflux updated subscribers of T197860: Special:Userrights does not display temporary groups if the user is in no non-temporary, non-automatic groups.
Jul 1 2018, 4:29 AM · Patch-For-Review, MediaWiki-Platform-Team (MWPT-Q4-Apr-Jun-2018), MediaWiki-Special-pages
Xaosflux updated the task description for T197860: Special:Userrights does not display temporary groups if the user is in no non-temporary, non-automatic groups.
Jul 1 2018, 4:28 AM · Patch-For-Review, MediaWiki-Platform-Team (MWPT-Q4-Apr-Jun-2018), MediaWiki-Special-pages
Xaosflux renamed T197860: Special:Userrights does not display temporary groups if the user is in no non-temporary, non-automatic groups from 7iaaaaaaaa to Special:Userrights does not display temporary groups if the user is in no non-temporary, non-automatic groups.
Jul 1 2018, 4:28 AM · Patch-For-Review, MediaWiki-Platform-Team (MWPT-Q4-Apr-Jun-2018), MediaWiki-Special-pages
Xaosflux closed T195304: Special:UserRights does not display temporary groups to users that can not change userrights as Resolved.
Jul 1 2018, 4:28 AM · MediaWiki-User-management, MediaWiki-Special-pages
Xaosflux updated the task description for T195304: Special:UserRights does not display temporary groups to users that can not change userrights.
Jul 1 2018, 4:28 AM · MediaWiki-User-management, MediaWiki-Special-pages
Xaosflux renamed T195304: Special:UserRights does not display temporary groups to users that can not change userrights from 7hcaaaaaaa to Special:UserRights does not display temporary groups to users that can not change userrights.
Jul 1 2018, 4:28 AM · MediaWiki-User-management, MediaWiki-Special-pages
Xaosflux assigned T195625: Implement a responsive layout for MonoBook to Isarra.
Jul 1 2018, 4:28 AM · Patch-For-Review, User-notice, MonoBook
Xaosflux lowered the priority of T195625: Implement a responsive layout for MonoBook from High to Normal.
Jul 1 2018, 4:28 AM · Patch-For-Review, User-notice, MonoBook
Xaosflux renamed T195625: Implement a responsive layout for MonoBook from a9baaaaaaa to Implement a responsive layout for MonoBook.
Jul 1 2018, 4:27 AM · Patch-For-Review, User-notice, MonoBook
Xaosflux updated the task description for T195625: Implement a responsive layout for MonoBook.
Jul 1 2018, 4:27 AM · Patch-For-Review, User-notice, MonoBook

Jun 29 2018

Xaosflux added a comment to T198440: Changes shifted down on Special:RecentChanges and Special:Watchlist.

Couldn't replicate this on enwiki under any skin with Firefox or Chrome

Jun 29 2018, 1:55 AM · MW-1.32-release-notes (WMF-deploy-2018-06-26 (1.32.0-wmf.10)), MediaWiki-Recent-changes, MediaWiki-Watchlist

Jun 28 2018

Xaosflux added a comment to T72152: AbuseFilter doesn't highlight the match cases at abuse log.

Perhaps this could be broken out to a separate function/screen? I'm usually able to determine the string hits using testers like the one at https://regex101.com/

Jun 28 2018, 11:31 AM · AbuseFilter

Jun 25 2018

Xaosflux added a comment to T194467: Invite to participate in research from the translation dashboard.

Please note, translation TO enwiki are currently restricted by way of an edit filter to those that are extendedconfirmed. Just an FYI (see https://en.wikipedia.org/wiki/WP:CXT)

Jun 25 2018, 11:26 PM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), User-notice, Research, Language-2018-Apr-June, ContentTranslation
Xaosflux closed T197061: ps.wikivoyage not appearing in www.wikivoyage.org as Resolved.

This is now live.

Jun 25 2018, 8:45 PM · Discovery, Wikimedia-Portals
Xaosflux closed T198096: Changes to the Www.wikivoyage.org template are not showing in production as Resolved.

Is live now, and updated expectations at meta:Template:portal talk header

Jun 25 2018, 8:45 PM · Discovery, Wikimedia-Portals
Xaosflux closed T198096: Changes to the Www.wikivoyage.org template are not showing in production, a subtask of T197061: ps.wikivoyage not appearing in www.wikivoyage.org, as Resolved.
Jun 25 2018, 8:45 PM · Discovery, Wikimedia-Portals
Xaosflux renamed T198096: Changes to the Www.wikivoyage.org template are not showing in production from Changes to the Www.wikivoyage.org template are showing in production to Changes to the Www.wikivoyage.org template are not showing in production.
Jun 25 2018, 1:24 PM · Discovery, Wikimedia-Portals
Xaosflux triaged T198096: Changes to the Www.wikivoyage.org template are not showing in production as Normal priority.
Jun 25 2018, 1:23 PM · Discovery, Wikimedia-Portals

Jun 21 2018

Xaosflux added a comment to T195304: Special:UserRights does not display temporary groups to users that can not change userrights.

Confirm, same symptom

Jun 21 2018, 9:28 PM · MediaWiki-User-management, MediaWiki-Special-pages

Jun 17 2018

Xaosflux updated the task description for T197061: ps.wikivoyage not appearing in www.wikivoyage.org.
Jun 17 2018, 8:37 PM · Discovery, Wikimedia-Portals
Xaosflux updated the task description for T197061: ps.wikivoyage not appearing in www.wikivoyage.org.
Jun 17 2018, 8:36 PM · Discovery, Wikimedia-Portals
Xaosflux triaged T197061: ps.wikivoyage not appearing in www.wikivoyage.org as Normal priority.
Jun 17 2018, 8:26 PM · Discovery, Wikimedia-Portals
Xaosflux moved T197061: ps.wikivoyage not appearing in www.wikivoyage.org from Untriaged to Features on the Wikimedia-Portals board.

Updated meta page, pending replication

Jun 17 2018, 8:26 PM · Discovery, Wikimedia-Portals
Xaosflux claimed T197061: ps.wikivoyage not appearing in www.wikivoyage.org.
Jun 17 2018, 8:25 PM · Discovery, Wikimedia-Portals

Jun 8 2018

Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

Is the default value for the "opting" something that can be specified at the project level?

Jun 8 2018, 12:06 AM · Patch-For-Review, User-notice, MonoBook

Jun 4 2018

Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

! In T195625#4254813, @Legoktm wrote:
and I worked out how to add a user preference to fully opt out of responsiveness, and just get the classic desktop styles: https://gerrit.wikimedia.org/r/#/c/437150/. Will that take care of most peoples concerns right now?

Jun 4 2018, 9:53 PM · Patch-For-Review, User-notice, MonoBook

Jun 3 2018

Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

! In T195625#4251048, @stjn wrote:
I am not into dick-measuring contests, sorry, and by starting them you completely missed my point.

Jun 3 2018, 12:07 AM · Patch-For-Review, User-notice, MonoBook

Jun 2 2018

Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

@stjn it is just where the volunteers are, a quick current statistics breakdown of the largest projects (wikipedia's with 1,000,000+ articles) show active volunteers of:

Jun 2 2018, 9:16 PM · Patch-For-Review, User-notice, MonoBook
Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

@stjn unlike some "third parties" that supposedly wanted this change (each of who can evaluate changes and decide if they want to actually promote them to their production environments) - the WMF managed implementations accept all current code changes to their (our) production environments - so of course there is a special relationship with the volunteers who carry out the foundation's mission; just as there is a special relationship between volunteer software developers and the WMF.

Jun 2 2018, 9:04 PM · Patch-For-Review, User-notice, MonoBook
Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

@Legoktm thanks for the reply - are you referring to this posting asking for feedback about a change "for mobile" that was actually put in to production for desktop? Event the latest post on :w:en:WP:VPT was titled "for mobile users".

Jun 2 2018, 8:39 PM · Patch-For-Review, User-notice, MonoBook
Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

@ashley if I'm reading the logs correctly, this got implemented based on your approval (+2'd) <anyone please correct me if this is wrong>. Can you explain your reasoning for how this satisfied the normal requirements including the need to "socialize high impact changes within the development community"?

Jun 2 2018, 7:22 PM · Patch-For-Review, User-notice, MonoBook
Xaosflux updated subscribers of T195625: Implement a responsive layout for MonoBook.
Jun 2 2018, 7:21 PM · Patch-For-Review, User-notice, MonoBook
Xaosflux added a project to T195625: Implement a responsive layout for MonoBook: Community-consensus-needed.

Community consensus should be reevaluated prior to deploying this to production projects as the default.

Jun 2 2018, 12:31 PM · Patch-For-Review, User-notice, MonoBook
Xaosflux added a comment to T196212: Revert T195625.

See list at https://en.wikipedia.org/wiki/Wikipedia:Village_pump_(technical)#Change_coming_to_MonoBook_skin_for_mobile_users

Jun 2 2018, 3:56 AM · User-notice, MonoBook
Xaosflux created T196212: Revert T195625.
Jun 2 2018, 3:54 AM · User-notice, MonoBook
Xaosflux added a comment to T195625: Implement a responsive layout for MonoBook.

"If you want to opt-out, you can use your mobile browser's "Request desktop site" option" ?! This is happening ON A DESKTOP computer.

Jun 2 2018, 3:51 AM · Patch-For-Review, User-notice, MonoBook

May 30 2018

Xaosflux added a comment to T187299: User-perceived page load performance study.

Wonder how many people will mark "no" because the slowest loading thing on the page is the survey - enough that it causes very visible page jumping.

May 30 2018, 12:55 AM · User-notice, MW-1.32-release-notes (WMF-deploy-2018-05-01 (1.32.0-wmf.2)), Readers-Web-Backlog (Tracking), QuickSurveys, Unplanned-Sprint-Work, Performance-Team

May 25 2018

Xaosflux updated subscribers of T195600: Old drafts on the English Wikipedia incorrectly marked as patrolled.
May 25 2018, 4:09 PM · MediaWiki-Patrolling, English-Wikipedia-New-Pages-Patrol
Xaosflux added projects to T195600: Old drafts on the English Wikipedia incorrectly marked as patrolled: English-Wikipedia-New-Pages-Patrol, MediaWiki-Patrolling.
May 25 2018, 4:08 PM · MediaWiki-Patrolling, English-Wikipedia-New-Pages-Patrol

May 24 2018

Xaosflux added a comment to T195520: Multiple projects reporting Cannot access the database: No working replica DB server.

Duplicated on meta: at https://meta.wikimedia.org/wiki/Category:Deleteme

May 24 2018, 7:36 PM · User-Addshore, Wikidata-Campsite, MW-1.32-release-notes (WMF-deploy-2018-05-29 (1.32.0-wmf.6)), Wikidata-Ministry-Of-Magic, Wikimedia-Incident, Wikidata, Patch-For-Review, Wikimedia-General-or-Unknown, Wikimedia-log-errors, Operations
Xaosflux renamed T195520: Multiple projects reporting Cannot access the database: No working replica DB server from Database error to Multiple projects reporting Cannot access the database: No working replica DB server.
May 24 2018, 7:36 PM · User-Addshore, Wikidata-Campsite, MW-1.32-release-notes (WMF-deploy-2018-05-29 (1.32.0-wmf.6)), Wikidata-Ministry-Of-Magic, Wikimedia-Incident, Wikidata, Patch-For-Review, Wikimedia-General-or-Unknown, Wikimedia-log-errors, Operations
Xaosflux added a project to T195520: Multiple projects reporting Cannot access the database: No working replica DB server: Operations.
May 24 2018, 7:35 PM · User-Addshore, Wikidata-Campsite, MW-1.32-release-notes (WMF-deploy-2018-05-29 (1.32.0-wmf.6)), Wikidata-Ministry-Of-Magic, Wikimedia-Incident, Wikidata, Patch-For-Review, Wikimedia-General-or-Unknown, Wikimedia-log-errors, Operations
Xaosflux created T195521: metawiki reporting Cannot access the database: No working replica DB serve.
May 24 2018, 7:33 PM

May 23 2018

Xaosflux added a project to T195397: {{PAGESINCATEGORY}} returns incorrect value on en-wiki Category:Candidates for speedy deletion: MediaWiki-Categories.
May 23 2018, 6:58 PM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), Wikimedia-log-errors, Patch-For-Review, DBA, Services (watching), Analytics, EventBus, MediaWiki-JobQueue, MediaWiki-Categories, MediaWiki-Parser
Xaosflux added a comment to T195397: {{PAGESINCATEGORY}} returns incorrect value on en-wiki Category:Candidates for speedy deletion.

Looks to be an ancient problem related to T18036

May 23 2018, 6:56 PM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), Wikimedia-log-errors, Patch-For-Review, DBA, Services (watching), Analytics, EventBus, MediaWiki-JobQueue, MediaWiki-Categories, MediaWiki-Parser
Xaosflux added a project to T195304: Special:UserRights does not display temporary groups to users that can not change userrights: MediaWiki-User-management.
May 23 2018, 3:26 AM · MediaWiki-User-management, MediaWiki-Special-pages

May 22 2018

Xaosflux created T195304: Special:UserRights does not display temporary groups to users that can not change userrights.
May 22 2018, 3:32 PM · MediaWiki-User-management, MediaWiki-Special-pages
Xaosflux added a comment to T195293: 503 error attempting to open multiple projects (Wikipedia and meta wiki are loading very slowly) .

I'm aware - it's no big deal.

May 22 2018, 1:48 PM · MW-1.32-release-notes (WMF-deploy-2018-08-21 (1.32.0-wmf.18)), Schema-change, Language-2018-July-September, User-Nikerabbit, MediaWiki-extensions-Translate, Wikimedia-Incident, Wikimedia-log-errors, Operations
Xaosflux awarded T195293: 503 error attempting to open multiple projects (Wikipedia and meta wiki are loading very slowly) a Burninate token.
May 22 2018, 1:48 PM · MW-1.32-release-notes (WMF-deploy-2018-08-21 (1.32.0-wmf.18)), Schema-change, Language-2018-July-September, User-Nikerabbit, MediaWiki-extensions-Translate, Wikimedia-Incident, Wikimedia-log-errors, Operations
Xaosflux renamed T195293: 503 error attempting to open multiple projects (Wikipedia and meta wiki are loading very slowly) from Wikipedia and meta wiki are loading very slowly to 503 error attempting to open multiple projects (Wikipedia and meta wiki are loading very slowly).
May 22 2018, 1:41 PM · MW-1.32-release-notes (WMF-deploy-2018-08-21 (1.32.0-wmf.18)), Schema-change, Language-2018-July-September, User-Nikerabbit, MediaWiki-extensions-Translate, Wikimedia-Incident, Wikimedia-log-errors, Operations
Xaosflux added a comment to T195293: 503 error attempting to open multiple projects (Wikipedia and meta wiki are loading very slowly) .

503 errors loading various projects:

May 22 2018, 1:39 PM · MW-1.32-release-notes (WMF-deploy-2018-08-21 (1.32.0-wmf.18)), Schema-change, Language-2018-July-September, User-Nikerabbit, MediaWiki-extensions-Translate, Wikimedia-Incident, Wikimedia-log-errors, Operations

May 21 2018

Xaosflux added a comment to T194778: Commons Deletion Bot: Compliance for ENWP bot trail.

Note, as enwiki Bot approver, if the date needs to be adjusted that is fine, and going +/-10% edits is also fine. The tagging request is new so if it is a problem, it can be skipped, and note the tag is likely not created on any other project so far. There are a few phab tasks open regarding using tags for certain types of edit identification (such as T13181) - but most of these are stalled out. Would be interested to know what the operator team thinks of using tags for this type of task once in production.

May 21 2018, 1:28 PM · Community-Tech, Commons

May 15 2018

Xaosflux renamed T194425: The page field in Special:Abusefilter/test and Special:Abuselog has become mandatory from The page field in Special:Abusefilter/test has become mandatory to The page field in Special:Abusefilter/test and Special:Abuselog has become mandatory.
May 15 2018, 3:44 PM · AbuseFilter, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), MediaWiki-HTMLForm
Xaosflux triaged T194769: abuselog requiring optional title parameter to be input as High priority.
May 15 2018, 2:59 PM · AbuseFilter, Regression
Xaosflux created T194769: abuselog requiring optional title parameter to be input.
May 15 2018, 2:58 PM · AbuseFilter, Regression
Xaosflux added a project to T13181: Mark bot edits in histories: MediaWiki-Change-tagging.
May 15 2018, 1:57 AM · MediaWiki-Change-tagging, Schema-change, MediaWiki-History-or-Diffs

May 14 2018

Xaosflux added a comment to T188151: Create the Commons deletion bot which will post messages on article talk pages.

Questions added to enwiki BRFA: https://en.wikipedia.org/wiki/Wikipedia:Bots/Requests_for_approval/Community_Tech_bot_5#Discussion

May 14 2018, 5:44 PM · Community-Tech, Commons

May 13 2018

Xaosflux added a comment to T193075: Create the 'Event coordinator' user group on English Wikipedia.

This has no different global impact then accountcreator, confirmation is a community-local level action and does not have global impact. On enwiki the autoconfirm threshold is currently 4days+10edits, the thresholds vary on other projects. The +confirmed flag on one project does not carry over to any other project.

May 13 2018, 12:53 PM · MW-1.32-release-notes (WMF-deploy-2018-05-08 (1.32.0-wmf.3)), Patch-For-Review, Wikimedia-Site-requests

May 12 2018

Xaosflux reopened T76053: Specific userright to bypass $wgAccountCreationThrottle as "Open".

Reopen - that other task does not accomplish the same ability. Notably, we have editors that need to create accounts in excess of the rate limit for events, etc - however they should not be exempt from all rate limiting (e.g. page moving). https://en.wikipedia.org/wiki/Wikipedia:Event_coordinator is an example of the use case.

May 12 2018, 2:38 PM · Patch-For-Review, MediaWiki-General-or-Unknown

May 11 2018

Xaosflux added a comment to T194529: Allow a user to be blocked from moving/renaming articles.

I think this should just be a collection of any actions that someone is blocked from, could be "move" but might as well be any blockable action (upload, thank, sendemail (migrate from existing system), etc)

May 11 2018, 11:51 PM · MediaWiki-User-management

May 4 2018

Xaosflux added a comment to T193903: The testing interface can only be used with abusefilter-modify right.

In looking how it is out there on various projects, targeting this as an "(abusefilter-view-private) or (abusefilter-modify)" gate should be done, as the ..view-private is not always explicitly assigned.

May 4 2018, 9:29 PM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), AbuseFilter
Xaosflux added a comment to T193829: API Logins are failing to authenticate with existing botpassword.

Thanks, I've let others know on the noticeboards that if they run in to this to try to regenerate their bot password. Hopefully the work in "BotPasswords: Indicate when a password needs reset" can help make this better visible.

May 4 2018, 9:06 PM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux added a comment to T193903: The testing interface can only be used with abusefilter-modify right.

May be better to extend to abusefilter-private instead of abusefilter-view, would like a clearer explanation of what may be able to be accessed from here that needed it to be restricted in the first place.

May 4 2018, 7:19 PM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), AbuseFilter
Xaosflux added a comment to T193829: API Logins are failing to authenticate with existing botpassword.

Hi Anomie, I was able to do this on my own:

May 4 2018, 7:00 PM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux added a comment to T193829: API Logins are failing to authenticate with existing botpassword.

@Anomie I personally observed this on accounts that had not had their main passwords changed since the botpassword was established, and the bot password was stored and previously working. AFAIK botpasswords should never "expire" correct?

May 4 2018, 3:03 PM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux lowered the priority of T193829: API Logins are failing to authenticate with existing botpassword from High to Normal.

Some users are reporting success now - please monitor

May 4 2018, 4:24 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux renamed T193829: API Logins are failing to authenticate with existing botpassword from API Logins are failing to authenticate to API Logins are failing to authenticate with existing botpassword.
May 4 2018, 3:27 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux added a comment to T193829: API Logins are failing to authenticate with existing botpassword.

Note: after regeneration of bot password, that account can now logon, second account that was not regenerated is unable to logon still

May 4 2018, 3:27 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux added a comment to T193829: API Logins are failing to authenticate with existing botpassword.

Regenerated botpassword, verified that web logon was working for account - no change

May 4 2018, 3:23 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux added a project to T193829: API Logins are failing to authenticate with existing botpassword: Operations.
May 4 2018, 3:17 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux triaged T193829: API Logins are failing to authenticate with existing botpassword as High priority.
May 4 2018, 3:14 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux created T193829: API Logins are failing to authenticate with existing botpassword.
May 4 2018, 3:14 AM · MW-1.31-release-notes, MW-1.29-release-notes, MW-1.27-release-notes, MW-1.30-release-notes, MW-1.32-release-notes (WMF-deploy-2018-05-15 (1.32.0-wmf.4)), Patch-For-Review, Huggle, AutoWikiBrowser, Bot-Frameworks
Xaosflux added a comment to T193769: Thousands of failed login attempts (wrong password).

Graph of authentication - showing it is still occuring: https://grafana.wikimedia.org/dashboard/db/authentication-metrics?orgId=1&from=1525275869702&to=now&theme=dark&panelId=13&fullscreen&var-entrypoint=*

May 4 2018, 3:08 AM · Security-Team

May 3 2018

Xaosflux updated the task description for T193769: Thousands of failed login attempts (wrong password).
May 3 2018, 11:56 PM · Security-Team
Xaosflux added a comment to T123243: Ability to alert when we get a sudden increase in bad passwords for privileged accounts, to possibly detect password brute-forcing.

T193769 may be a good example

May 3 2018, 10:13 PM · Security-Team
Xaosflux added a project to T193769: Thousands of failed login attempts (wrong password): Security-Team.
May 3 2018, 7:16 PM · Security-Team
Xaosflux added a comment to T193769: Thousands of failed login attempts (wrong password).

FYI: Unusual number of reports coming in on enwiki throughout the day as well.

May 3 2018, 7:14 PM · Security-Team

Apr 25 2018

Xaosflux moved T193075: Create the 'Event coordinator' user group on English Wikipedia from Unsorted to Single wikis on the Community-consensus-needed board.
Apr 25 2018, 7:37 PM · MW-1.32-release-notes (WMF-deploy-2018-05-08 (1.32.0-wmf.3)), Patch-For-Review, Wikimedia-Site-requests
Xaosflux added a project to T193075: Create the 'Event coordinator' user group on English Wikipedia: Community-consensus-needed.
Apr 25 2018, 7:37 PM · MW-1.32-release-notes (WMF-deploy-2018-05-08 (1.32.0-wmf.3)), Patch-For-Review, Wikimedia-Site-requests
Xaosflux added a comment to T189425: Special:AbuseFilter: OOUI widgets take up more vertical space.

Here is a full screen example of the new layout, at 1050x1680 resolution - the menu selector consumes the majority of the screen now.

Apr 25 2018, 1:29 PM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), AbuseFilter, OOUI
Xaosflux added a comment to T181770: Apex theme: Too much vertical space between form fields (Special:Preferences/MonoBook).

The abuse filter vertical space appears to be the same problem in monobook and vector, so it is just informational here.

Apr 25 2018, 1:26 PM · OOUI (OOUI-0.27.4), MonoBook, MediaWiki-User-preferences
Xaosflux added a comment to T189425: Special:AbuseFilter: OOUI widgets take up more vertical space.

@Aklapper, yes requires scrolling to even see the widget controls at many resolutions or if any project specific help as been customized in the summary area.

Apr 25 2018, 11:39 AM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), AbuseFilter, OOUI
Xaosflux added a comment to T189425: Special:AbuseFilter: OOUI widgets take up more vertical space.
Apr 25 2018, 11:34 AM · MW-1.32-release-notes (WMF-deploy-2018-07-10 (1.32.0-wmf.12)), AbuseFilter, OOUI

Apr 24 2018

Xaosflux added a comment to T181770: Apex theme: Too much vertical space between form fields (Special:Preferences/MonoBook).

Apr 24 2018, 10:13 PM · OOUI (OOUI-0.27.4), MonoBook, MediaWiki-User-preferences
Xaosflux added a comment to T132284: Convert Special:AbuseFilter to OOUI.

Please see T181770 - did this get pushed out without verifying layout in all the skins??

Apr 24 2018, 10:10 PM · MW-1.32-release-notes (WMF-deploy-2018-05-08 (1.32.0-wmf.3)), MW-1.31-release-notes (WMF-deploy-2018-04-10 (1.31.0-wmf.29)), User-notice, MW-1.30-release-notes (WMF-deploy-2017-08-22 (1.30.0-wmf.15)), MW-1.27-release (WMF-deploy-2016-04-26_(1.27.0-wmf.22)), AbuseFilter, Epic, UI-Standardization
Xaosflux added a comment to T181770: Apex theme: Too much vertical space between form fields (Special:Preferences/MonoBook).

This problem is now appearing in Special:AbuseFilter as well. Possibly related to T132284

Apr 24 2018, 10:09 PM · OOUI (OOUI-0.27.4), MonoBook, MediaWiki-User-preferences