Fair enough about the security issues. I wouldn't trust me either if I knew nothing
about me, lol. That said, if there are some less critical things that you can get me
access to that are also important to wikimedia let me know, so that I can still contribute
in some technically significant way.
alexander(a)vassilevski.com
‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
On Monday, 17 December 2018 12:16, Derk-Jan Hartman <d.j.hartman+wmf_ml(a)gmail.com>
wrote:
Hi Alexander,
I haven't forgotten about your request...
Please don't take this the wrong way, but lately there has been quite a LOT of
malicious activity at several Wikimedia systems and your account is brand new..
I can't find any history of your activity with the projects or any other projects in
any public form... Especially in light of the recent event-stream compromise for instance
(
https://medium.com/intrinsic/compromised-npm-package-event-stream-d47d08605…), I think
it is wise of us to be extra careful and take some more time to make sure your enthusiasm
is exactly what it is pure enthousiasme to become part of this. But at this time that
makes me uncomfortable to give you access to this set of servers as one of them is
actually rather critical and could allow a person to do a lot of potential harm to
Wikimedians.
It is sad that we have to consider these kinds of things nowadays. I'm considering
how we should approach this and how I can gain enough confidence to help you along.
DJ
On Fri, Dec 14, 2018 at 7:50 PM Alexander Vassilevski
<alexander(a)vassilevski.com> wrote:
> OK. Thanks for letting me know that. It looks
like I've been declined but at least I'm getting some idea on how things work
around here...
>
> alexander(a)vassilevski.com
>
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> On Friday, 14 December 2018 10:35, Brian Wolff <bawolff(a)gmail.com> wrote:
>
> > That is the process for getting shell access
on production [e.g. servees directly running Wikipedia]. Which is rather different (and
much harder) than getting access to an abandoned tool.
> >
> > --
> > brian
> >
> > On Friday, December 14, 2018, Alexander Vassilevski
<alexander(a)vassilevski.com> wrote:
> >> I created a task in phab to be added to NDA ldap, so I can sign the NDA and
get shell access:
> >>
https://phabricator.wikimedia.org/T211996
> >> One of the subtasks (from
https://wikitech.wikimedia.org/wiki/Volunteer_NDA#Privileged_LDAP_or_shell_… ) on
this is to get
> >>
> >> [ ] At least one comment of support from a Wikimedia Foundation employee,
explaining why it is a good idea to accept your request
> >> [ ] A comment of approval from one Wikimedia Foundation manager (usually
the manager of an employee supporting you).
> >> [ ] (Have someone with access double-check which
mediawiki.org account that
the manager's Phabricator account is linked to, where the SUL account was created, and
how it was created on that wiki.)
> >>
> >> Can someone do this? If you need to see some qualifications I can try to
get some code of mine to you from some old puppet stuff I've done and I can show you
my github, where you can see some of my code.
> >> If I'm making a rookie mistake here and this type of access is not
needed, let me know. I'm also sasheto +i on IRC #wikimedia-tech, so you can message me
there too, I check it from time to time.
> >> alexander(a)vassilevski.com
> >>
> >> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> >> On Thursday, 13 December 2018 12:33, Alex Monk <krenair(a)gmail.com>
wrote:
> >>
> >>> You'll basically need to create a wikitech account (if you
don't already have one) and convince one of the existing project admins (listed at
https://tools.wmflabs.org/openstack-browser/project/maps) to add you.
> >>> Please use Puppet instead of manually setting up servers by hand.
> >>>
> >>> On Thu, 13 Dec 2018 at 20:21, Alexander Vassilevski
<alexander(a)vassilevski.com> wrote:
> >>>
> >>>> I have some free time this December and I could manually create the
new vm's and replicate the configs/installs by hand on newly created Ubuntu 18
vm's ( after figuring out how the old ones are installed and configured and if given
access, of course .. ).
> >>>>
> >>>> Keep in mind that I'm new to wikimedia and don't know much
about the infrastructure or procedures, so what do I need to do to be given access and
volunteer to do this?
> >>>>
> >>>> alexander(a)vassilevski.com
> >>>>
> >>>> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> >>>> On Thursday, 13 December 2018 12:09, Johan Jönsson
<jjonsson(a)wikimedia.org> wrote:
> >>>>
> >>>>> On Thu, Dec 13, 2018 at 9:36 AM Johan Jönsson
jjonsson(a)wikimedia.org
> >>>>> wrote:
> >>>>>
> >>>>> > On Thu, Dec 13, 2018 at 9:24 AM Derk-Jan Hartman <
> >>>>> >
[[d.j.hartman+wmf_ml@gmail.com](mailto:d.j.hartman%2Bwmf_ml@gmail.com)](mailto:[d.j.hartman%2Bwmf_ml@gmail.com](mailto:d.j.hartman%252Bwmf_ml@gmail.com))>
wrote:
> >>>>> >
> >>>>> > > Yeah might be wise to at least reach out to en.wp and
de.wp. Or maybe Tech
> >>>>> > > News even ?
> >>>>> >
> >>>>> > "Hey folks, this might not work in the future"
could be reason enough to
> >>>>> > include it in Tech News, yes.
> >>>>>
> >>>>> Included
inhttps://meta.wikimedia.org/wiki/Tech/News/2018/51
which is
> >>>>> going out to the wikis on Monday.
> >>>>>
> >>>>> //Johan Jönsson
> >>>>>
> >>>>>
---------------------------------------------------------------------------------------------------------------------------
> >>>>>
> >>>>> Wikitech-l mailing list
> >>>>> Wikitech-l(a)lists.wikimedia.org
> >>>>>
https://lists.wikimedia.org/mailman/listinfo/wikitech-l
> >>>>
> >>>> _______________________________________________
> >>>> Wikitech-l mailing list
> >>>> Wikitech-l(a)lists.wikimedia.org
> >>>>
https://lists.wikimedia.org/mailman/listinfo/wikitech-l
> >> _______________________________________________
> >> Wikitech-l mailing list
> >> Wikitech-l(a)lists.wikimedia.org
> >>
https://lists.wikimedia.org/mailman/listinfo/wikitech-l
> _______________________________________________
> Wikitech-l mailing list
> Wikitech-l(a)lists.wikimedia.org
>
https://lists.wikimedia.org/mailman/listinfo/wikitech-l