[13:49:32] What is writeapi for? is not that obsolete? [14:45:07] [1/2] $wgEnableAPI and $wgEnableWriteAPI are now deprecated and will be removed in a future version. The API is now considered to be stable, secure and essential. [14:45:07] [2/2] [14:47:13] configuration parameter =/= userright [14:48:54] actually where did you even get writeapi from cause im not seeing it anywhere really [14:50:05] In special:globalgrouppermissions [14:50:40] lol [14:50:43] that right was removed in 1.43 [14:51:52] https://phabricator.wikimedia.org/T294397 [14:51:57] This? [14:52:17] I see stewards and sysadmins on Wikimedia also have it now [14:52:48] they forgor skull emoji [15:37:30] Add it to the existing task and I'll clean it up later [15:37:50] Just giving Stewards and T&S time to comment on the changes [15:39:40] Yes, check my comment, i included it there and also [15:41:48] Okay I will review that later this evening [15:42:51] Thank you for doing most of the work for us [15:44:19] yes, it took hour and half with small pauses :DD [15:49:30] I've only been putting it off 15 months [15:52:16] i think you are doing another things [15:52:35] is there reason to have member group on meta that can add bureaucrat? [15:53:30] i understand member is propably for userrights-interwiki to add member, but why it can add crat? [15:55:42] ` 22:51, 4 March 2025 Raidarr changed group metadata for Special:ManageWiki/permissions/member, added addgroups bureaucrat (dummy group for central permissions assignment)` [16:41:41] Ye there are better ways to do that [16:41:52] At least less risky rights for it [16:44:29] That's dangerously stupid [16:45:35] @Meta Administrators any objections to me making it that far less risky [16:45:48] Or @raidarr [16:46:24] None [16:47:20] Go ahead [16:47:34] ^ [16:52:57] Done [17:06:24] @posix_memalign iirc you were the person who setup securepoll here — is it meant to store encryption keys plaintext in the database? [17:06:30] seems like a slight security issue to me [17:06:40] either that or I'm being a big cock who can't use securepoll [17:07:25] it very much would store the public key in the db, not so much for the private key [17:07:53] [1/2] seems to store the private key in the db [17:07:53] [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1505617868723720452/image.png?ex=6a0b4768&is=6a09f5e8&hm=088d8ed8c5b7acdd1cc08d3cede6b37b1d24ba4059fcea8fec8c2ad6d9509b0c& [17:08:32] surely this can't be the intended way because then anybody with access to the securepoll database (even if it's restricted somewhat) can decrypt everything [17:11:03] that's supposed to be the public key silly [17:11:04] Oh i think i now understand, it needs "something" to exist and to be able to be used. Like consul, also only read right. [17:11:17] Ye [17:11:35] [1/2] so 2 pubkeys? [17:11:35] [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1505618800782082088/image.png?ex=6a0b4847&is=6a09f6c7&hm=52067c76c50e9cb33a30c220447b089da1a58d89d8f6b9cfb5bafaa3e47d3acd& [17:11:45] There's 2 keys [17:11:50] 💀 oh yeah [17:11:51] A sign key and an encryption key [17:11:53] 😭 [17:12:00] The sign key you need the private side to sign it [17:12:06] I just like forgot how asymmetric encryption worked [17:12:11] and assumed private key bad [17:12:16] The encrypt key you will only have the public for [17:12:23] it's 2 sets of keys [17:12:36] imagine if steward added member group to someone locally on meta instead of other wiki :D [17:12:59] I mean my contractors working on that and other stuff charge £2k a day so if it wasn't confusing they wouldn't get away with their prices [17:13:11] Exactly and hence me dealing with it [21:19:34] this is an absolute error and I have no idea why it has add addgroups bureaucrat [21:20:08] the only reason for that to exist on meta is so I can use Special:UserRights for some other wiki and add someone on that wiki to the member group, it should be totally empty of access on meta [22:38:24] I am not saying anything, i just copied log. Maybe you clicked on it by mistake or some glitch. Something can happen. [22:39:01] it must have been a mistake, or a glitch, either or and I've been known to do silly things [22:39:11] but definitely neither intentional nor proper