User talk:FNDE

Welcome to Meta!

Hello, FNDE. Welcome to the Wikimedia Meta-Wiki! This website is for coordinating and discussing all Wikimedia projects. You may find it useful to read our policy page. If you are interested in doing translations, visit Meta:Babylon. You can also leave a note on Meta:Babel or Wikimedia Forum if you need help with something (please read the instructions at the top of the page before posting there). Happy editing!

-- Meta-Wiki Welcome (talk) 16:32, 22 March 2015 (UTC)

sec.Watch grants

Hi, can you explain why the grants requested for sec.Watch are needed? Especially CSS/JS editing and private data access are sensitive grants which do not seem related at all to the stated goal of the application. --Tgr (WMF) (talk) 21:26, 6 January 2017 (UTC)

Hi Tgr (WMF), the following features are planned for the next version (0.2):

• a wizard to setup the common.js (insert one line at the end)
• create a subpage with a container for the javascript
• send an e-mail to the user, when a observed section is changed

I think the grants are proper for these tasks? --FNDE (talk) 00:36, 7 January 2017 (UTC)

Thanks for the explanation!

"Edit the MediaWiki namespace and user CSS/JavaScript" is not needed for a user to edit their own user JS, and it could be a major security risk if an administrator is somehow tricked into giving permission to a fake app, or the real app is hacked (breaking into a Labs application is a lot easier than compromising Wikipedia directly). For the same reason I would avoid editing user JS if possible - can you use a gadget instead? Or, if the tool only works with a single wiki, limit the grant to that wiki. JS editing is a lot less problematic on large wikis where malicious JS edits are likely to be caught by patrollers. --Tgr (WMF) (talk) 04:40, 7 January 2017 (UTC)

Hi Tgr (WMF), thank you for your answer! I see your points, it's really comprehensible for me. So, can you delete my request for sec.Watch [0.2]? I added a new one (sec.Watch Wizard [0.1]) and limited the grants on dewiki. In addition, I removed the grants for editinterface and added editmycssjs (instead of privateinfo). I hope it's okay in this case? --FNDE (talk) 13:26, 7 January 2017 (UTC)

I apologize for disappearing. Distractions happened and I forgot about this for a while :(

As I understand the tool is still pending review (phab:T155271). I rejected it for now because that's the only way to log notes about an app (the OAuth admin interface is, uh, a bit unpolished) but the status can be changed to approved when the review finishes (so consider this stalled, not rejected). --Tgr (WMF) (talk) 00:30, 27 January 2017 (UTC)

Presenting Community Engagement Insights survey report: Tuesday, October 10, 1600 UTC

Hi FNDE,
I am reaching out to you because you signed up to receive updates about the Global Wikimedia survey.

We will be hosting a public event online to present the data, a few examples on how teams will be using it for annual planning, and what are next steps for this project. The event will take place on Tuesday, October 10, at 9:00 am PST (1600 UTC), and the presentation will be in English. You can watch the livestream here, and ask question via IRC on #wikimedia-office.

If you are unable attend, you can also find the report on meta, and watch the recording of the event at a later time.

We hope to have you join us online! -- María Cruz 23:28, 2 October 2017 (UTC)