[Labs-announce] [notice] DB replicas user_properties view redaction

Mon Nov 28 20:02:58 UTC 2016

Concerns have been raised about (some) user information available via the
Labs DB replicas.

On review, these properties have been deemed sensitive by our security
folks:

user_properties: language, skin, timecorrection, varient

I have amended the views to remove these properties.

We (Labs admins) are available to help explain this change, and concerns
can be raised by contacting security at wikimedia.org

-- 
Chase Pettet
Engineering Manager -- Labs
chasemp on phabricator <https://phabricator.wikimedia.org/p/chasemp/> and
IRC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.wikimedia.org/pipermail/labs-announce/attachments/20161128/779a7ff7/attachment.html>