Page MenuHomePhabricator

jrbs (Joe Sutherland)
Sr. Trust and Safety Specialist

Today

  • Clear sailing ahead.

Tomorrow

  • Clear sailing ahead.

Wednesday

  • Clear sailing ahead.

User Details

User Since
Jun 30 2015, 10:08 PM (329 w, 5 d)
Availability
Available
IRC Nick
foks / tzatziki
LDAP User
Foks
MediaWiki User
JSutherland (WMF) [ Global Accounts ]

"jrbs" are my initials. I don't really use a personal Phabricator account; I'll try to flag stuff I'm doing in my volunteer capacity as such.

Recent Activity

Thu, Oct 21

jrbs updated subscribers of T294063: Consider changing the text "CSRF" to "Failed" or similar.
Thu, Oct 21, 9:11 PM · MediaWiki-extensions-SecurePoll
jrbs updated subscribers of T294063: Consider changing the text "CSRF" to "Failed" or similar.

CSRF stands for https://en.wikipedia.org/wiki/Cross-site_request_forgery - it's mostly technical jargon that shouldn't normally be shown to users, typically we say something like "session failure".

Thu, Oct 21, 9:11 PM · MediaWiki-extensions-SecurePoll
jrbs added a comment to T294061: SecurePoll not tagging duplicate votes consistently.

Ah, in T2772777 it seems to suggest this isn't based on IP/UA but on cookies(?), perhaps that's the reason for the inconsistency here?

Thu, Oct 21, 9:08 PM · Anti-Harassment, MediaWiki-extensions-SecurePoll
jrbs created T294063: Consider changing the text "CSRF" to "Failed" or similar.
Thu, Oct 21, 9:07 PM · MediaWiki-extensions-SecurePoll
jrbs created T294061: SecurePoll not tagging duplicate votes consistently.
Thu, Oct 21, 9:01 PM · Anti-Harassment, MediaWiki-extensions-SecurePoll

Tue, Oct 19

jrbs added a comment to T293731: Account recovery help needed for SUL account dima_st_bk.

Hi @dima_st_bk, could you please also email ca@wikimedia.org from the email associated with your SUL account?

Tue, Oct 19, 5:59 PM · Trust-and-Safety

Fri, Oct 15

jrbs added a comment to T293431: Staff group should have apihighlimits right.

Belatedly T&S has no issues with this change.

Fri, Oct 15, 8:35 PM · Wikimedia-Site-requests, Trust-and-Safety

Fri, Oct 8

jrbs added a comment to T292685: Carry out the 2021 fawiki elections on votewiki.

Update: I spoke with the team and we agree that October 27 will be enough time. You can absolutely revise as you need but something like this would work for us:

Fri, Oct 8, 8:24 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections
jrbs added a comment to T292685: Carry out the 2021 fawiki elections on votewiki.

@jrbs So the timeline must be delayed at least for one week I think. Or more?

Fri, Oct 8, 6:42 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections
jrbs updated subscribers of T292685: Carry out the 2021 fawiki elections on votewiki.

Hi there, I can do this, but I don't think this timeline will work. The Movement Charter Drafting Committee (MCDC) elections vote runs until October 25, and we will also need to tally these results after the fact, so I don't think the interface can be changed to Farsi until after that is completed. Otherwise I can start to get things set up for this election, but the voting definitely cannot start on October 22 as proposed here (sorry!).

Fri, Oct 8, 7:21 AM · Wikimedia-Site-requests, Trust-and-Safety, Elections

Mon, Sep 27

jrbs renamed T291668: Create voter list for MCDC 2021 SecurePoll elections from Create SecurePoll election for MCDC 2021 to Create voter list for MCDC 2021 SecurePoll elections.
Mon, Sep 27, 9:32 PM · MW-1.38-notes (1.38.0-wmf.2; 2021-09-28), Elections

Sep 23 2021

jrbs added a comment to T291668: Create voter list for MCDC 2021 SecurePoll elections.

Working with @Reedy on getting the scripts ready to create the eligibility list, using the instructions on Wikitech. I'm not sure how to actually run this now, presuming it needs to be patched etc first.

Sep 23 2021, 10:11 PM · MW-1.38-notes (1.38.0-wmf.2; 2021-09-28), Elections
jrbs created T291668: Create voter list for MCDC 2021 SecurePoll elections.
Sep 23 2021, 9:56 PM · MW-1.38-notes (1.38.0-wmf.2; 2021-09-28), Elections

Sep 14 2021

jrbs added a comment to T288783: SecurePoll doing DB writes to securepoll_log on HTTP GET [M].

@jrbs If you have time, would you be able to confirm that you can view the voter list and then see the fact you just viewed the voter list recorded to the log?

Sep 14 2021, 10:50 PM · MW-1.37-notes (1.37.0-wmf.21; 2021-08-30), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll, Wikimedia-production-error

Sep 9 2021

jrbs closed T288547: Account recovery help needed for Wikimedia and Wikitech account Amitie_10g as Resolved.

This has been done now.

Sep 9 2021, 11:28 PM · wikitech.wikimedia.org, cloud-services-team (Kanban), Trust-and-Safety

Aug 26 2021

jrbs triaged T289797: Override list should allow for global usernames as Medium priority.
Aug 26 2021, 4:57 PM · MediaWiki-extensions-SecurePoll

Aug 25 2021

jrbs added a comment to T288547: Account recovery help needed for Wikimedia and Wikitech account Amitie_10g.

I'm having trouble running this. Getting the following:

foks@mwmaint2002:~$ mwscript extensions/OATHAuth/maintenance/disableOATHAuthForUser.php --wiki=labswiki "Amitie 10g"
Wikimedia\Rdbms\DBReadOnlyError from line 1082 of /srv/mediawiki/php-1.37.0-wmf.19/includes/libs/rdbms/database/Database.php: Database is read-only: The primary database server is running in read-only mode.
#0 /srv/mediawiki/php-1.37.0-wmf.19/includes/libs/rdbms/database/Database.php(1357): Wikimedia\Rdbms\Database->assertIsWritableMaster()
#1 /srv/mediawiki/php-1.37.0-wmf.19/includes/libs/rdbms/database/Database.php(1308): Wikimedia\Rdbms\Database->executeQuery('DELETE FROM `oa...', 'MediaWiki\\Exten...', 128)
#2 /srv/mediawiki/php-1.37.0-wmf.19/includes/libs/rdbms/database/Database.php(3570): Wikimedia\Rdbms\Database->query('DELETE FROM `oa...', 'MediaWiki\\Exten...', 128)
#3 /srv/mediawiki/php-1.37.0-wmf.19/includes/libs/rdbms/database/DBConnRef.php(68): Wikimedia\Rdbms\Database->delete('`oathauth_users...', 'id = 7041', 'MediaWiki\\Exten...')
#4 /srv/mediawiki/php-1.37.0-wmf.19/includes/libs/rdbms/database/DBConnRef.php(526): Wikimedia\Rdbms\DBConnRef->__call('delete', Array)
#5 /srv/mediawiki/php-1.37.0-wmf.19/extensions/OATHAuth/src/OATHUserRepository.php(179): Wikimedia\Rdbms\DBConnRef->delete('oathauth_users', Array, 'MediaWiki\\Exten...')
#6 /srv/mediawiki/php-1.37.0-wmf.19/extensions/OATHAuth/maintenance/disableOATHAuthForUser.php(37): MediaWiki\Extension\OATHAuth\OATHUserRepository->remove(Object(MediaWiki\Extension\OATHAuth\OATHUser), 'Maintenance scr...')
#7 /srv/mediawiki/php-1.37.0-wmf.19/maintenance/doMaintenance.php(108): DisableOATHAuthForUser->execute()
#8 /srv/mediawiki/php-1.37.0-wmf.19/extensions/OATHAuth/maintenance/disableOATHAuthForUser.php(48): require_once('/srv/mediawiki/...')
#9 /srv/mediawiki/multiversion/MWScript.php(116): require_once('/srv/mediawiki/...')
#10 {main}
Aug 25 2021, 1:16 AM · wikitech.wikimedia.org, cloud-services-team (Kanban), Trust-and-Safety

Aug 24 2021

jrbs added a comment to T289186: Write cli tally output to database.

Yep, that is correct. As long as you are happy with this, I think we are good.

Aug 24 2021, 6:40 PM · MW-1.37-notes (1.37.0-wmf.21; 2021-08-30), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T288888: SecurePoll: vote_current not updated when vote struck.

I think this is expected behaviour in this situation. When you vote a second (or third, etc) time, you are doing so with the assumption that your previous vote will be discarded. The software presently alerts you to this fact when you arrive at the ballot after having already voted. Therefore, your "current" vote is for all intents and purposes your only vote.

Aug 24 2021, 6:38 PM · Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Aug 23 2021

jrbs added a comment to T289186: Write cli tally output to database.

After this change, the election results will be available in the dump file after the CLI tally has been run. I don't know whether or not you want people to be able to see this.

Aug 23 2021, 7:58 PM · MW-1.37-notes (1.37.0-wmf.21; 2021-08-30), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Aug 20 2021

jrbs added a comment to T288547: Account recovery help needed for Wikimedia and Wikitech account Amitie_10g.

I just attempted to do this, but it seems the db is read-only at the moment? Will wait a bit and try again.

Aug 20 2021, 11:57 PM · wikitech.wikimedia.org, cloud-services-team (Kanban), Trust-and-Safety

Aug 19 2021

jrbs triaged T289323: Takedown tools: Add links to the DMCA notice and the Commons noticeboard in notice to user as Low priority.
Aug 19 2021, 11:12 PM · Wikimedia-Takedown-Tools, Anti-Harassment
jrbs created T289323: Takedown tools: Add links to the DMCA notice and the Commons noticeboard in notice to user.
Aug 19 2021, 11:12 PM · Wikimedia-Takedown-Tools, Anti-Harassment
jrbs added a comment to T288547: Account recovery help needed for Wikimedia and Wikitech account Amitie_10g.

The SUL aspect of this request was completed, by the by. Not sure about the Wikitech side just yet.

Aug 19 2021, 4:59 PM · wikitech.wikimedia.org, cloud-services-team (Kanban), Trust-and-Safety
jrbs added a comment to T289186: Write cli tally output to database.

@Niharika @jrbs Just a note, I believe once the results are written to the database they will be visible in the dump file.

If the election does not have the voter-privacy property set, this dump file is visible to anyone.

Before we do this ticket, we might want to decide whether we want to:

  1. Remove the results from the dump file (like was done with the private key in T288924), or
  2. Rely on the election admins to appropriately set the voter-privacy property when creating an election
Aug 19 2021, 4:56 PM · MW-1.37-notes (1.37.0-wmf.21; 2021-08-30), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Aug 16 2021

jrbs added a comment to T288938: Enable automatic redirection to the mobile version of votewiki.

@Jdlrobson noted that the "Mobile view" link at the bottom of every page has been blanked out by setting the interface message to '' on-wiki. We should consider reverting that change/deleting that page mentioning the rationale above. @Qgil / @jrbs: Do you have permission to do this?

Aug 16 2021, 6:08 PM · SRE, Anti-Harassment, Traffic

Aug 13 2021

jrbs added a comment to T288839: SecurePoll: You must log in to vote in this election [Timebox: 8h].

This happened to me in the past, usually because I was already logged in on votewiki - not sure if that's the cause? In that case, the system gets confused, logs me out on votewiki, so I just hit back and proceed again and can vote normally.

Aug 13 2021, 6:07 PM · MediaWiki-extensions-SecurePoll
jrbs added a comment to T288455: Create list of developers eligible to vote on the 2021 board vote.

Thank you so much @Aklapper for this investigation and these queries!

@jrbs can we take these queries and run with them or do we need anything else?

Aug 13 2021, 5:23 PM · Release-Engineering-Team (Doing), Elections

Aug 12 2021

jrbs added a comment to T288711: /wiki/Special:SecurePoll/create Error: Call to a member function getId() on null.

@jrbs please confirm that it is fixed.

Aug 12 2021, 5:34 PM · MW-1.37-notes (1.37.0-wmf.18; 2021-08-09), Regression, Anti-Harassment (The Letter Song), Wikimedia-production-error, MediaWiki-extensions-SecurePoll
jrbs added a comment to T288547: Account recovery help needed for Wikimedia and Wikitech account Amitie_10g.

Hi @Amitie_10g, could you please email ca@wikimedia.org from the email attached to your account, quoting this task number (T288547)? Thank you!

Aug 12 2021, 2:50 AM · wikitech.wikimedia.org, cloud-services-team (Kanban), Trust-and-Safety
jrbs reopened T287859: Creating an election with "all wikis" can give a DBTransactionSizeError as "Open".

I think I just ran into this again. Not sure what changed. This was creating an election with GPG encryption, STV with droop quota, all wikis, 14 days. May be the all wikis problem again?

Aug 12 2021, 2:45 AM · MW-1.37-notes (1.37.0-wmf.17; 2021-08-02), Anti-Harassment (The Letter Song), DBA, Platform Engineering, Performance-Team, Performance Issue, MediaWiki-extensions-SecurePoll

Aug 10 2021

jrbs awarded T288025: Create SecurePoll voter list for 2021 board vote a Yellow Medal token.
Aug 10 2021, 6:56 PM · Platform Engineering, MediaWiki-extensions-SecurePoll
jrbs added a comment to T287894: SecurePoll: allow STV elections to be tallied from the cli.

@jrbs when this is on production (on Wednesday I think) it would be great if you could test it out, especially on (encrypted) STV elections and other large encrypted elections.

Aug 10 2021, 4:48 PM · MW-1.37-notes (1.37.0-wmf.18; 2021-08-09), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

May 14 2021

1234qwer1234qwer4 awarded T282624: Limit IA granting/revoking to stewards only a Meh! token.
May 14 2021, 5:57 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
FriedrickMILBarbarossa awarded T282624: Limit IA granting/revoking to stewards only a Pterodactyl token.
May 14 2021, 2:24 AM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs added a comment to T282624: Limit IA granting/revoking to stewards only.

It is not WMF's role to make community's operational decisions, as in what stewards alone can do. T&S does a disservice to the community when it so simply ignores the years of community operation. The stewards were not set up to be, and should not be, your sole point of community consultation on these matters. Read the scope of their role. For matters of this significance it is simply wrong for WMF to think that they get to impose their solutions, especially only in consultation with stewards. I am a little disappointed that stewards are not kicking back on this issue telling you that this is not for their decision, and saying that the community needs to be consulted.

WHAT ARE WE DOING HERE IN PHABRICATOR??? That we are having to have this discussion on a phabricator speaks volume to the problem of staff isolating from community on general matters, and increasingly on so many matters. Do you not see this particularly as an issue? This is a technical forum, not the place for our social conversations.

I ask that you bring the social issues to metawiki. Set out the problem, set out the exact principles, set out the non-negotiables, and then what is negotiable. Please stop the change the methodology of benevolent dictatorship. I, personally, don't mind temporary measures to fix immediate concerns, but if this is months of existing discussion, it seems that you lost that opportunity.

May 14 2021, 2:03 AM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests

May 12 2021

jrbs updated the task description for T282624: Limit IA granting/revoking to stewards only.
May 12 2021, 6:55 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs changed the status of T282624: Limit IA granting/revoking to stewards only from Open to Stalled.

Hi all. Thanks for your input. I apologise for the hasty implementation here.

May 12 2021, 6:51 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs updated the task description for T282624: Limit IA granting/revoking to stewards only.
May 12 2021, 1:10 AM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs added a comment to T282624: Limit IA granting/revoking to stewards only.

Just to flag that this is moving quite quickly but it is the end of the workday here, so I will disengage until tomorrow. I will pass on the comments made so far to the rest of my team. Thanks all for your candour.

May 12 2021, 1:02 AM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs added a comment to T282624: Limit IA granting/revoking to stewards only.

@jrbs the problem, as I see it, is that this is being presented as a fait accompli - the decision has been made, but if you want to complain, you may submit your concerns, to partially quote Douglas Adams, "in the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying 'Beware of the Leopard.'" (in all seriousness - I think we all know that there exist no "questions or concerns" someone could raise that would actually change the outcome here). There have been discussions with the steward team, yes but not with the people who previously granted the right. It's too late now, but next time this sort of thing happens, I suggest at least talking to the impacted parties before the change is submitted for merge rather than blindsiding them such that they find out at the same time as everyone else.

May 12 2021, 1:01 AM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs added a comment to T282624: Limit IA granting/revoking to stewards only.

... Reaching out and getting agreement would be a good idea. There are many wikis with restrictive policies under the understanding that local bureaucrats can indeed add I_Admin.

May 12 2021, 12:11 AM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests

May 11 2021

jrbs added a project to T282624: Limit IA granting/revoking to stewards only: User-notice.
May 11 2021, 11:54 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs updated the task description for T282624: Limit IA granting/revoking to stewards only.
May 11 2021, 10:27 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs updated the task description for T282624: Limit IA granting/revoking to stewards only.
May 11 2021, 10:26 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests
jrbs created T282624: Limit IA granting/revoking to stewards only.
May 11 2021, 10:19 PM · Community-consensus-needed, Tech-Ambassadors, wdwb-tech, Chinese-Sites, Wikidata, Serbian-Sites, Commons, Wiktionary-fr, Stewards-and-global-tools, User-notice, Trust-and-Safety, Wikimedia-Site-requests

May 6 2021

jrbs added a comment to T280275: Investigate why tallying a large, encrypted election did not complete on votewiki when kicked off via the tally page [8h].

I'm sorry, I didn't see that I was tagged in here. Phabricator is hard :)

May 6 2021, 12:46 AM · Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Apr 15 2021

jrbs awarded T280275: Investigate why tallying a large, encrypted election did not complete on votewiki when kicked off via the tally page [8h] a Love token.
Apr 15 2021, 6:40 PM · Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T215582: Takedown Tools: DMCA tool should not require a URL.

This came up again for a non-image takedown yesterday. I ultimately just put Google.com as the source since it wouldn't otherwise save without a URL. Just an FYI / update since I don't think AHT has the bandwidth to fix something like that right now, and it remains lowish priority IMO

Apr 15 2021, 2:53 PM · Anti-Harassment, Wikimedia-Takedown-Tools

Apr 14 2021

jrbs updated the task description for T280097: Images and page titles out of place on the iOS "top read" widget.
Apr 14 2021, 12:51 AM · Wikipedia-iOS-App-Backlog, iOS-app-Bugs
jrbs created T280097: Images and page titles out of place on the iOS "top read" widget.
Apr 14 2021, 12:45 AM · Wikipedia-iOS-App-Backlog, iOS-app-Bugs

Apr 6 2021

jrbs triaged T279487: `Delete` buttons in Special:SecurePoll/edit should be red / destructive as Low priority.
Apr 6 2021, 10:29 PM · Anti-Harassment (The Letter Song), MW-1.37-notes (1.37.0-wmf.19; 2021-08-16), User-Samtar, good first task, Design, MediaWiki-extensions-SecurePoll

Mar 26 2021

jrbs added a comment to T277224: Check on TallyPage.php for tally results and display them.

@Niharika @jrbs After the results are successfully tallied, the tallied results will be stored in the XML dump, so anyone can view them. Just checking this is OK.

Mar 26 2021, 5:31 PM · MW-1.36-notes (1.36.0-wmf.37; 2021-03-30), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Mar 16 2021

jrbs added a comment to T277591: 2FA removal for Serhio Magpie.

@SerDIDG Please send an email to ca@wikimedia.org using the email connected to the account. Thanks!

Mar 16 2021, 10:08 PM · Trust-and-Safety

Mar 12 2021

jrbs added a comment to T277223: Add a new user-group for WMF staff accounts.

What permissions should this group have? The same as the staff group?

Mar 12 2021, 5:28 AM · WikimediaMessages, Wikimedia-Site-requests, Anti-Harassment

Mar 4 2021

jrbs added a comment to T276354: Don't attempt to tally large encrypted elections via the TallyPage.

(sorry, I hadn't seen T276360: Output the time taken to run tally.php so we can judge what size of encrypted election times out when I commented here :) )

Mar 4 2021, 8:04 PM · MW-1.36-notes (1.36.0-wmf.35; 2021-03-16), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Mar 3 2021

jrbs removed a watcher for Anti-Harassment: jrbs.
Mar 3 2021, 7:05 PM
jrbs added a comment to T276354: Don't attempt to tally large encrypted elections via the TallyPage.
In T276354, @Tchanders wrote:

@jrbs attempted to tally some large elections in T269029#6693314 and T269029#6693321 and found:

No. votesTimed out?
143No (tallies instantly)
594Yes
2118Yes

This was before we improved the speed of tallying in T271824. Locally we found significant speed-ups. It's difficult to test on production given the limited availability of large elections. @jrbs is the above table still the case, since T271824?

Mar 3 2021, 7:04 PM · MW-1.36-notes (1.36.0-wmf.35; 2021-03-16), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T273025: SecurePoll: Allow editing some of the election config post election-start.

@STran @Tchanders @Niharika When creating an election, the election's config is recorded in a page (e.g. https://vote.wikimedia.beta.wmflabs.org/wiki/SecurePoll:154). This page is not updated when the election is edited. Does it need to be?

So, for example, I created this election, and its config was recorded on this page. I then modified the return-url and admin list, but the page still records and admins and return-url when I first created it.

I'm not sure why this isn't updating - is there somewhere else that updates if you alter the election settings? ...

@jrbs Sorry to comment on a closed task. So obviously the election settings are updated in the database, and (I think) that is all that matters as far as SecurePoll is concerned. It is just the page above which is not updated. I am not sure what uses that page. Maybe it was designed for third party scripts. Would you like me to raise a bug to get it updated as well when we edit an election?

Mar 3 2021, 6:54 PM · MW-1.36-notes (1.36.0-wmf.31; 2021-02-16), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Feb 24 2021

jrbs added a comment to T271884: Investigate ways to allow WMF staff to be added to the voter list for board elections [8H].

Do we lock (WMF) staff accounts when staff leave the foundation, such that this query+check would maybe get us "current staff"... or is that something which we can't work out from the database alone?

Yes, it's part of the ITS off-boarding process, though it's not impossible some have been missed over the years.

Feb 24 2021, 6:20 PM · Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T271884: Investigate ways to allow WMF staff to be added to the voter list for board elections [8H].

There is already a group called staff but it currently grants the group member access to basically everything, including sensitive pages. It's currently only granted to a few people in the foundation, handed out by T&S on a case-by-case basis. In order to create a new group for all staff holders, we'll probably need to talk to someone in HR who manages user accounts. I am not very hopeful about a quick turnaround if we go that route (not that we are in a particular rush here).

Feb 24 2021, 5:58 PM · Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T275470: Add option to allow specific user groups to vote to 'Basic options' list.

Personally I have never used the "autogenerate" functionality provided there. I looked into the settings from the 2017 Board Elections, which was the last major election we ran that did not use a hard-coded eligibility list, and it also does not appear to have made use of this functionality. Instead we just used the "basic" settings here, which seems to have worked just fine and done more or less the same thing that auto-populating the list would.

Screenshot 2021-02-24 at 9.41.15 AM.png (802×1 px, 94 KB)

Feb 24 2021, 5:49 PM · MW-1.36-notes (1.36.0-wmf.38; 2021-04-06), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Feb 18 2021

jrbs added a comment to T273025: SecurePoll: Allow editing some of the election config post election-start.

@STran @Tchanders @Niharika When creating an election, the election's config is recorded in a page (e.g. https://vote.wikimedia.beta.wmflabs.org/wiki/SecurePoll:154). This page is not updated when the election is edited. Does it need to be?

So, for example, I created this election, and its config was recorded on this page. I then modified the return-url and admin list, but the page still records and admins and return-url when I first created it.

Feb 18 2021, 7:13 PM · MW-1.36-notes (1.36.0-wmf.31; 2021-02-16), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Feb 3 2021

jrbs added a comment to T272916: Combine TallyPage forms into one.

@jrbs We were wondering if the upload encrypted dump feature is useful to preserve. Are there instances when it gets used?

Feb 3 2021, 5:23 PM · MW-1.36-notes (1.36.0-wmf.32; 2021-02-23), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T273693: Superset error: `Hive table 'wmf.webrequest' is corrupt. The number of files in the directory (64) does not match the declared bucket count (256) for partition`.

Hi @jrbs,
The problem comes from a change we made to the table on 2020-11-16 (see bottom of the https://wikitech.wikimedia.org/wiki/Analytics/Data_Lake/Traffic/Webrequest#Changes_and_known_problems_since_2015-03-04 table).
Indeed data has not yet been deleted, as of today we still have data back to 2020-11-05.
The data can be queried correctly using hive, I think presto is more sensitive to structure incoherence (see https://github.com/prestodb/presto/issues/8557).

Feb 3 2021, 4:52 PM · Analytics
jrbs added a comment to T271884: Investigate ways to allow WMF staff to be added to the voter list for board elections [8H].

@drochford Would you happen to know how the users are being added manually in these cases? (The process for solving the issue in detail)

Feb 3 2021, 1:21 AM · Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Feb 2 2021

jrbs renamed T273693: Superset error: `Hive table 'wmf.webrequest' is corrupt. The number of files in the directory (64) does not match the declared bucket count (256) for partition` from Superset error: `Hive table 'wmf.webrequest' is corrupt. The number of files in the directory (64) does not match the declared bucket count (256) for partition to Superset error: `Hive table 'wmf.webrequest' is corrupt. The number of files in the directory (64) does not match the declared bucket count (256) for partition`.
Feb 2 2021, 11:41 PM · Analytics
jrbs created T273693: Superset error: `Hive table 'wmf.webrequest' is corrupt. The number of files in the directory (64) does not match the declared bucket count (256) for partition`.
Feb 2 2021, 11:38 PM · Analytics

Feb 1 2021

jrbs added a comment to T269029: Investigate issues with Tally function in SecurePoll [8Hr].

Elections from 2013 onwards never claimed to be secure; they didn't even claim to be consistent with the laws of mathematics, for that matter. Nothing new.

Feb 1 2021, 10:50 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T269029: Investigate issues with Tally function in SecurePoll [8Hr].

The fact that this process has gone without being understood or used for so long tells me that there might not be a need for the extra security measures that SecurePoll was designed to support.

Uh? People complained about the election not being run by a neutral third-party which could guarantee safe handling of the keys. The fact that concerns were steamrolled is not evidence people "did not understand" or "did not care".
https://meta.wikimedia.org/wiki/Talk:Wikimedia_Foundation_elections_2013#Software_in_the_Public_Interest?
https://lists.wikimedia.org/pipermail/wikimedia-l/2014-October/074880.html

Feb 1 2021, 10:30 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T180896: Allow functionaries to reset second factor on low-risk accounts.

What counts as a low risk account? Or the reverse, what rights/groups are going to mark an account as not "low risk"?

Feb 1 2021, 4:43 PM · SecTeam-Processed, Security-Team, Security, MediaWiki-extensions-OATHAuth, Trust-and-Safety, WMF-Legal, MW-1.34-notes (1.34.0-wmf.1; 2019-04-16)

Jan 22 2021

jrbs added a comment to T272732: Reset password for SUL account Davey2010.

Hi @Davey2010 - please email ca@wikimedia.org from the email you used on that account. Thanks!

Jan 22 2021, 7:21 PM · Trust-and-Safety
jrbs renamed T272732: Reset password for SUL account Davey2010 from Scrambled password to Reset password for SUL account Davey2010.
Jan 22 2021, 7:20 PM · Trust-and-Safety
jrbs added a comment to T271824: Improve the efficiency of vote decryption during tallying.

@jrbs @drochford When the time comes for testing this in production, it would be helpful to test tallying an encrypted election with the largest number of voters you might expect, to check whether the timeout limit is still being hit. If it is there are still more things we can do, but seems sensible to hold off unless we need to.

Jan 22 2021, 5:08 PM · MW-1.36-notes (1.36.0-wmf.28; 2021-01-26), Platform Team Workboards (External Code Reviews), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Jan 19 2021

jrbs added a comment to T271354: Check poll admins are also in the electionadmin group when accessing admin features.

@jrbs @drochford Do we need to alert the community about this change in workflow?

Jan 19 2021, 5:55 PM · MW-1.36-notes (1.36.0-wmf.28; 2021-01-26), Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Jan 4 2021

jrbs claimed T270881: Disable 2FA for SUL user `Kiran Gopi`.
Jan 4 2021, 6:21 PM · Trust-and-Safety

Dec 18 2020

jrbs updated subscribers of T269029: Investigate issues with Tally function in SecurePoll [8Hr].

I'm getting a case of the nostalgias now. SecurePoll's whole security model was already present in the original version of BoardVote, which I wrote as a volunteer in May 2004. It was only the third extension to be created, after wikihiero and timeline. I advocated for voting and democratic processes in the fledgling Foundation and I was keen to do whatever technical work was required to support that.

SecurePoll was an abstraction of BoardVote, adding a concept of multiple elections, with configuration of elections in the database. I called it "SecurePoll" in reference to the encryption feature inherited from BoardVote.

Dec 18 2020, 6:01 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Dec 17 2020

jrbs created T270356: VisualEditor red link page creation disables "deleted edits" links.
Dec 17 2020, 12:54 AM · VisualEditor

Dec 16 2020

jrbs added a comment to T269029: Investigate issues with Tally function in SecurePoll [8Hr].

Ah, I see. That's helpful context, thank you!

Dec 16 2020, 11:10 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs updated subscribers of T269029: Investigate issues with Tally function in SecurePoll [8Hr].

Saving the results
@jrbs I'm not very familiar with the tallying workflow, but is one of the problems that elections need to be repeatedly tallied? Is there a need for us to store the result in a way that's accessible via the web interface once an election has been tallied?

Dec 16 2020, 10:45 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Dec 15 2020

jrbs added a comment to T269029: Investigate issues with Tally function in SecurePoll [8Hr].

Thanks @jrbs, this is really helpful.

Dec 15 2020, 8:47 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T269029: Investigate issues with Tally function in SecurePoll [8Hr].

Thanks @jrbs. Sorry I have a couple of follow-up questions:

  • Did you say it only happens for elections with large numbers of votes?
  • If so, do you know roughly how large?
  • How long do you wait roughly before you see the error?
Dec 15 2020, 8:42 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll
jrbs added a comment to T270203: Create acl*miraheze-sysadmins for security tasks we file.

Just with us. It would cover security issues reported to or found by us and filed upstream.

Dec 15 2020, 7:50 PM · Security-Team, User-RhinosF1, Project-Admins
jrbs added a comment to T270203: Create acl*miraheze-sysadmins for security tasks we file.

All Miraheze sysadmins have NDAs as part of their role.

Dec 15 2020, 7:29 PM · Security-Team, User-RhinosF1, Project-Admins

Dec 11 2020

jrbs added a comment to T269029: Investigate issues with Tally function in SecurePoll [8Hr].

@jrbs What error message do you see when tallying fails due to there being too many votes?

Dec 11 2020, 7:03 PM · Platform Engineering, Anti-Harassment (The Letter Song), MediaWiki-extensions-SecurePoll

Nov 27 2020

jrbs renamed T268800: SecurePoll should differentiate partial blocks from full blocks from SecurePoll should ignore partial blocks to SecurePoll should differentiate partial blocks from "full" blocks.
Nov 27 2020, 12:23 AM · MW-1.36-notes (1.36.0-wmf.37; 2021-03-30), Anti-Harassment (The Letter Song), Trust-and-Safety, Platform Engineering, MediaWiki-extensions-SecurePoll

Nov 26 2020

jrbs created T268800: SecurePoll should differentiate partial blocks from full blocks.
Nov 26 2020, 3:21 AM · MW-1.36-notes (1.36.0-wmf.37; 2021-03-30), Anti-Harassment (The Letter Song), Trust-and-Safety, Platform Engineering, MediaWiki-extensions-SecurePoll
jrbs added a comment to T268799: Make Special:EditPage/Special:Random/SecurePoll Valid on Test Wikipedia.

What would be the usecase of something like that? Is this something people are intending to use in some kind of workflow?

Nov 26 2020, 3:12 AM

Nov 24 2020

jrbs triaged T268583: `Fatal exception of type "RuntimeException" ` when voting as Unbreak Now! priority.

Boldly bumping to unbreak now! since it's impacting the active ArbCom elections

Nov 24 2020, 12:06 AM · MW-1.36-notes (1.36.0-wmf.18; 2020-11-17), Patch-For-Review, Wikimedia-production-error, Trust-and-Safety, Platform Engineering, MediaWiki-extensions-SecurePoll
jrbs added a project to T268583: `Fatal exception of type "RuntimeException" ` when voting: Trust-and-Safety.
Nov 24 2020, 12:06 AM · MW-1.36-notes (1.36.0-wmf.18; 2020-11-17), Patch-For-Review, Wikimedia-production-error, Trust-and-Safety, Platform Engineering, MediaWiki-extensions-SecurePoll
jrbs created T268583: `Fatal exception of type "RuntimeException" ` when voting.
Nov 24 2020, 12:06 AM · MW-1.36-notes (1.36.0-wmf.18; 2020-11-17), Patch-For-Review, Wikimedia-production-error, Trust-and-Safety, Platform Engineering, MediaWiki-extensions-SecurePoll

Nov 23 2020

jrbs added a comment to T262689: Carry out the 2020 fawiki elections on votewiki.

@jrbs Hello, it just needs to be purged. Given votewiki is edited so infrequently, the automatic purge does not happen immediately. I made a null edit, and it's fixed.

Nov 23 2020, 10:16 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections
jrbs added a comment to T262689: Carry out the 2020 fawiki elections on votewiki.

Hi @Urbanecm - seems that there are still issues on votewiki where the language is still in Farsi? e.g. https://vote.wikimedia.org/wiki/User:Trijnstel ... Does it still need converted back to English?

Nov 23 2020, 10:12 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections

Oct 20 2020

jrbs created T266060: Add Nahid to WMF-NDA group.
Oct 20 2020, 6:44 PM · WMF-NDA-Requests

Oct 19 2020

jrbs closed T265926: Reset 2FA for user Mdann52 on en.wiki as Resolved.

All sorted now :)

Oct 19 2020, 11:09 PM · Trust-and-Safety
jrbs updated the task description for T262689: Carry out the 2020 fawiki elections on votewiki.
Oct 19 2020, 10:53 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections
jrbs added a comment to T262689: Carry out the 2020 fawiki elections on votewiki.

At this time, the following should be done: I should be removed from election admins, my account should be blocked on votewiki,

Oct 19 2020, 10:53 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections

Oct 15 2020

jrbs added a subtask for T181368: Log source port for anonymous users and expose it for sysops/checkusers: Unknown Object (Task).
Oct 15 2020, 11:29 PM · SRE, Traffic, CheckUser

Oct 14 2020

jrbs updated the task description for T262689: Carry out the 2020 fawiki elections on votewiki.
Oct 14 2020, 9:27 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections
jrbs added a comment to T262689: Carry out the 2020 fawiki elections on votewiki.

Thanks for the ping. I have done the following:

  • Created new accounts for @Urbanecm and @Sotiale (temp passwords emailed)
  • Promoted both stewards to electionadmin
  • Unblocked and promoted @Huji to electionadmin
  • Created new SecurePoll election and added all three volunteers as electionadmins
Oct 14 2020, 9:27 PM · Wikimedia-Site-requests, Trust-and-Safety, Elections