Improving the security of our users on Wikimedia sites

List overview All Threads
Download

newer

older

Introducing the new Wikipedia store

Call for Candidates - WMF...

Andrew Sherman

20 Apr 2015 20 Apr '15

6:13 p.m.

Hello Everyone, We just published "Improving the security of our users on Wikimedia sites" to the blog. URL: https://blog.wikimedia.org/2015/04/20/improving-security-for-our-users/ Thanks to Chris for writing and helping us edit this post. Below are some proposed social media messages. Tweak as needed. *Twitter* We teamed up with @iSECPartners and @OpenTechFund to assess the security of our sites. Check out the report here [link] *FB/G+* We teamed up with iSEC Partners to assess the security of our sites and protect the privacy of our users. Their engineers developed attacks against the current version of MediaWiki to identify security flaws, in a new report sponsored by the Open Technology Fund. [link] Thanks, -- Andrew Sherman Digital Communications | Wikimedia Foundation *E:* asherman(a)wikimedia.org *WMF:* ASherman (WMF) <https://meta.wikimedia.org/wiki/User:ASherman_(WMF)>

Attachments:

attachment.htm (text/html — 1.9 KB)

Show replies by date

Michael Guss

20 Apr 20 Apr

6:54 p.m.

LGTM On Mon, Apr 20, 2015 at 4:13 PM, Andrew Sherman <asherman(a)wikimedia.org> wrote:

...

-- Michael Guss Research Analyst Wikimediafoundation.org mguss(a)wikimedia.org

Chris Steipp

6:58 p.m.

On Apr 20, 2015 4:13 PM, "Andrew Sherman" <asherman(a)wikimedia.org> wrote:

...

Hello Everyone, We just published "Improving the security of our users on Wikimedia

sites" to the blog. URL:

...

https://blog.wikimedia.org/2015/04/20/improving-security-for-our-users/ Thanks to Chris for writing and helping us edit this post. Below are some proposed social media messages. Tweak as needed. Twitter We teamed up with @iSECPartners and @OpenTechFund to assess the security

of our sites. Check out the report here [link]

...

FB/G+ We teamed up with iSEC Partners to assess the security of our sites and

protect the privacy of our users. Their engineers developed attacks against the current version of MediaWiki to identify security flaws, in a new report sponsored by the Open Technology Fund. [link] Maybe just "MediaWiki" instead of "the current version of MediaWiki", since we did a release to specifically fix issues that they found. Might confuse some people as is.

...

Thanks, -- Andrew Sherman Digital Communications | Wikimedia Foundation E: asherman(a)wikimedia.org WMF: ASherman (WMF)

Pine W

8:41 p.m.

Thanks for your work on this, Chris. Forwarding to Wikitech-l. Pine On Apr 20, 2015 4:58 PM, "Chris Steipp" <csteipp(a)wikimedia.org> wrote:

...

On Apr 20, 2015 4:13 PM, "Andrew Sherman" <asherman(a)wikimedia.org> wrote:

Hello Everyone, We just published "Improving the security of our users on Wikimedia

sites" to the blog. URL:

of our sites. Check out the report here [link]

FB/G+ We teamed up with iSEC Partners to assess the security of our sites and

Thanks, -- Andrew Sherman Digital Communications | Wikimedia Foundation E: asherman(a)wikimedia.org WMF: ASherman (WMF)

_______________________________________________ Social-media mailing list Social-media(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/social-media

Fabrice Florin

9:11 p.m.

I agree with Chris’s recommendation below to just say ‘MediaWiki’ (instead of "the current version of MediaWiki”). Much appreciated, Fabrice

...

On Apr 20, 2015, at 4:58 PM, Chris Steipp <csteipp(a)wikimedia.org> wrote: On Apr 20, 2015 4:13 PM, "Andrew Sherman" <asherman(a)wikimedia.org <mailto:asherman@wikimedia.org>> wrote:

Hello Everyone, We just published "Improving the security of our users on Wikimedia sites" to the blog. URL: https://blog.wikimedia.org/2015/04/20/improving-security-for-our-users/ <https://blog.wikimedia.org/2015/04/20/improving-security-for-our-users/> Thanks to Chris for writing and helping us edit this post. Below are some proposed social media messages. Tweak as needed. Twitter We teamed up with @iSECPartners and @OpenTechFund to assess the security of our sites. Check out the report here [link] FB/G+ We teamed up with iSEC Partners to assess the security of our sites and protect the privacy of our users. Their engineers developed attacks against the current version of MediaWiki to identify security flaws, in a new report sponsored by the Open Technology Fund. [link]

Maybe just "MediaWiki" instead of "the current version of MediaWiki", since we did a release to specifically fix issues that they found. Might confuse some people as is.

Thanks, -- Andrew Sherman Digital Communications | Wikimedia Foundation E: asherman(a)wikimedia.org <mailto:asherman@wikimedia.org> WMF: ASherman (WMF)

_______________________________________________ Social-media mailing list Social-media(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/social-media

Michael Guss

10:19 p.m.

We have shared: Fb: https://www.facebook.com/wikipedia/posts/10153175272233346 Wikimedia Foundation G+ : https://plus.google.com/u/0/b/108193079736330787108/108193079736330787108/p… @wikimedia: https://twitter.com/Wikimedia/status/590304000026652672 On Mon, Apr 20, 2015 at 7:11 PM, Fabrice Florin <fflorin(a)wikimedia.org> wrote:

...

I agree with Chris’s recommendation below to just say ‘MediaWiki’ (instead of "the current version of MediaWiki”). Much appreciated, Fabrice On Apr 20, 2015, at 4:58 PM, Chris Steipp <csteipp(a)wikimedia.org> wrote: On Apr 20, 2015 4:13 PM, "Andrew Sherman" <asherman(a)wikimedia.org> wrote:

Hello Everyone, We just published "Improving the security of our users on Wikimedia

sites" to the blog. URL:

of our sites. Check out the report here [link]

FB/G+ We teamed up with iSEC Partners to assess the security of our sites and

Thanks, -- Andrew Sherman Digital Communications | Wikimedia Foundation E: asherman(a)wikimedia.org WMF: ASherman (WMF)

_______________________________________________ Social-media mailing list Social-media(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/social-media _______________________________________________ Social-media mailing list Social-media(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/social-media

-- Michael Guss Research Analyst Wikimediafoundation.org mguss(a)wikimedia.org

Fabrice Florin

21 Apr 21 Apr

1:04 a.m.

Thanks, Michael! -f

...

On Apr 20, 2015, at 8:19 PM, Michael Guss <mguss(a)wikimedia.org> wrote: We have shared: Fb: https://www.facebook.com/wikipedia/posts/10153175272233346 <https://www.facebook.com/wikipedia/posts/10153175272233346> Wikimedia Foundation G+ : https://plus.google.com/u/0/b/108193079736330787108/108193079736330787108/p… <https://plus.google.com/u/0/b/108193079736330787108/108193079736330787108/posts/CrCJCj6AXuP> @wikimedia: https://twitter.com/Wikimedia/status/590304000026652672 <https://twitter.com/Wikimedia/status/590304000026652672> On Mon, Apr 20, 2015 at 7:11 PM, Fabrice Florin <fflorin(a)wikimedia.org <mailto:fflorin@wikimedia.org>> wrote: I agree with Chris’s recommendation below to just say ‘MediaWiki’ (instead of "the current version of MediaWiki”). Much appreciated, Fabrice

On Apr 20, 2015, at 4:58 PM, Chris Steipp <csteipp(a)wikimedia.org <mailto:csteipp@wikimedia.org>> wrote: On Apr 20, 2015 4:13 PM, "Andrew Sherman" <asherman(a)wikimedia.org <mailto:asherman@wikimedia.org>> wrote:

Hello Everyone, We just published "Improving the security of our users on Wikimedia sites" to the blog. URL: https://blog.wikimedia.org/2015/04/20/improving-security-for-our-users/ <https://blog.wikimedia.org/2015/04/20/improving-security-for-our-users/> Thanks to Chris for writing and helping us edit this post. Below are some proposed social media messages. Tweak as needed. Twitter We teamed up with @iSECPartners and @OpenTechFund to assess the security of our sites. Check out the report here [link] FB/G+ We teamed up with iSEC Partners to assess the security of our sites and protect the privacy of our users. Their engineers developed attacks against the current version of MediaWiki to identify security flaws, in a new report sponsored by the Open Technology Fund. [link]

Maybe just "MediaWiki" instead of "the current version of MediaWiki", since we did a release to specifically fix issues that they found. Might confuse some people as is.

Thanks, -- Andrew Sherman Digital Communications | Wikimedia Foundation E: asherman(a)wikimedia.org <mailto:asherman@wikimedia.org> WMF: ASherman (WMF)

_______________________________________________ Social-media mailing list Social-media(a)lists.wikimedia.org <mailto:Social-media@lists.wikimedia.org> https://lists.wikimedia.org/mailman/listinfo/social-media <https://lists.wikimedia.org/mailman/listinfo/social-media> -- Michael Guss Research Analyst Wikimediafoundation.org mguss(a)wikimedia.org <mailto:mguss@wikimedia.org>_______________________________________________ Social-media mailing list Social-media(a)lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/social-media

3330

days inactive

3331

days old

social-media@lists.wikimedia.org

Manage subscription

6 comments

5 participants

tags (0)

participants (5)

Andrew Sherman
Chris Steipp
Fabrice Florin
Michael Guss
Pine W