Wikipedia talk:Wikipedia Signpost/2016-11-04/News and notes

Latest comment: 7 years ago by Doc James in topic Andreas

Discuss this story

In the "prompted an extended response from Maher". I can't seem to find any actual answer to the question asked, so I will ask it again here (paraphrased from the mailing list question):

It is well documented that Coleman's former government employers worked to introduce and/or keep open security vulnerabilities in a wide range of systems and software. Can we please have a clear statement that if she knows about or finds out about any vulnerabilities and vectors that can be used to attack MediaWiki she will share them with our developers so that they can be fixed? --Guy Macon (talk) 13:04, 4 November 2016 (UTC)Reply

Hi @Guy Macon:, I thought I was clear: "We will work closely together in defending and strengthening the privacy and security of our platforms for our users." But I'll get more explicit: Failing to disclose and address a vulnerability/vector in any part of our platform would be unacceptable, whether it was for the purpose of facilitating exploitation or otherwise. The WMF security team addresses critical vulnerabilities as soon as they are identified, regardless of who identifies them. It is at the discretion of the security team to determine whether the exploit is critical and should be addressed before disclosure, or whether it can be safely disclosed and addressed. The security and integrity of our systems, and the security and privacy of Wikimedia's users, are paramount. Katherine (WMF) (talk) 00:19, 5 November 2016 (UTC)Reply
That's good enough for me. Thanks for the clarification. --Guy Macon (talk) 06:21, 5 November 2016 (UTC)Reply

Andreas edit

Will be missed. Peter Damian (talk) 10:16, 5 November 2016 (UTC)Reply

We need a strong an critical press. Andreas provided a great service to the movement during his time here. Sad to see him moving on. Doc James (talk · contribs · email) 17:12, 5 November 2016 (UTC)Reply