[05:51:27] hello i need help [05:51:27] Hi Noor_, just ask! There is no need to ask if you can ask, if you already asked the question please wait for someone to respond [05:51:49] my email viewnoor@gmail [05:51:57] viewnoor@gmail.com [05:52:36] and i forgot my password and i cannot recover it [05:54:32] any one here ???? [10:28:50] So I have just setup mediawiki for a company. They will have both sensitive and non-sensitive information in the wiki. Currently I have it firewall protected (ie, office ips). But we are considering to remove ip-restrictions and require login to read (and admin creates users). Since I haven't used mediawiki before I wonder about it's security reputation. Is it decently safe? [10:30:01] Depends what security reputation [10:30:09] MW is fine fully open, or fully closed [10:30:15] It's not good at half open half closed [10:30:31] !access [10:30:31] For information on customizing user access, see . For common examples of restricting access using both rights and extensions, see . [10:30:36] grr [10:30:38] !cms [10:30:38] Wikis are designed for openness, to be readable and editable by all. If you want a forum, a blog, a web authoring toolkit or corporate content management system, perhaps don't use wiki software. There is a nice overview of free tools available at including the possibility to try each system. For ways to restrict access in MediaWiki, see !access. [10:31:19] Every single time I use this extension I end up having to spend time filing bugs https://phabricator.wikimedia.org/T157787 [10:33:14] Reedy: How do you mean with fully closed? [10:33:35] As in, no pages (well, bar maybe the main page) are viewable without having an account [10:33:57] Nemo_bis: I guess many people simply write from top to bottom instead of bottom-up. (I know, citation needed) :) [10:33:59] Reedy: Ok, that is the setup I have [10:34:29] ie, you can only view/edit anything if you are logged in with your wiki account [10:34:59] As long as you lock down signup too :) [10:35:19] yep, have done that [10:35:27] only sysop can create account [10:35:28] s [10:35:49] So the security concern is regarding the software itself.. [10:35:51] andre__: the captcha is added after the fact [10:35:58] uuuhm :( [10:36:40] mlVing: Well, as the bot reply says, MW isn't really designed to be closed off [10:37:32] Which I guess you could say is https://phabricator.wikimedia.org/T90866 [10:37:47] Reedy: I don't fully understand that argument. Does that mean, even if you require a user to have an account and be logged in, that is not the way it is "suppose to be"? [10:38:00] Pretty much [10:38:14] Think about it as MediaWiki is primarily designed for Wikipedia [10:38:21] They have no need in most cases to be locked down [10:38:25] We want it to be open [10:38:29] from a security perspective or from an "information-should-be-free" perspective? [10:38:48] same thing really [10:39:06] Security by transparency ;) [10:39:06] Like I say, the software isn't designed with fine grain control in mind [10:39:15] There's some extensions to help with it [10:39:33] So hence, either fully open is fine [10:39:37] So is fully closed off [10:40:00] Reedy: Ok, for me that is perfectly fine [10:40:06] fully closed off [10:40:13] I wasn't sure with your "non-sensitive information" comment if you were wanting to make some pages public [10:40:27] nope, nothing should really be public [10:40:37] so bad wording from me [10:40:38] Oh, ok then :) [10:40:47] Wikimedia Deutschland has sensitive information on a private *and* intranet-restricted wiki [10:40:50] I just meant that not everthing is sensitive [10:40:52] Well, bad me for also not asking for clarification [10:41:06] Then there's a private wiki open to the internet for stuff which is private, but not super-sensitive [10:41:09] I mean, of course, keep an eye on security releases etc [10:41:15] As you should with all software [10:41:31] But it's rare we have any security bugs related to this sort of access thing [10:42:08] Reedy: Thanks, that is the things I would like to hear about. Any specific urls to follow for updates regarding security? [10:42:29] https://lists.wikimedia.org/mailman/listinfo/mediawiki-announce [10:42:35] That mailing list is probably the best suggestion [10:42:44] It's pretty low traffic [10:42:56] ok, good [10:43:07] thanks for help Reedy [10:43:08] < 20 emails in 2016 [10:44:08] np [10:50:22] Reedy: hi. Any new suggestions for https://phabricator.wikimedia.org/T141482? [10:50:26] we are still getting this error [10:59:12] Well, as it's not been fixed... That's not a surprise [10:59:28] Oh, different bug [11:05:47] Ok.. Also I would like to know how it would be possible to edit the interface login error message that says: "there has been hijacking" etc. [11:59:53] hi [12:01:05] this page vandalised [12:01:06] https://en.wikipedia.org/w/index.php?title=GNU_Lesser_General_Public_License&type=revision&diff=761894199&oldid=754101653 [12:01:11] Please get it back [12:06:47] a101: Hi. This channel is about the MediaWiki software. Topics related to content of English Wikipedia should go to #wikipedia-en - thanks! [12:07:08] or feel free to undo that change yourself? [12:07:44] Thanks. [15:03:56] Did we really ship MediaWiki with "m" and "manual" interwiki prefix pointing to mediawiki.org? http://elinux.org/api.php?action=query&meta=siteinfo&siprop=interwikimap&sifilteriw=local [15:08:07] probably not. maybe they imported a lot of manual pages from mw.org to their wiki, and wanted links like [[Manual:Foo]] to magically work. [15:09:00] Maybe [15:09:15] Though we did have that hewikisource and bugzilla.wikipedia.org stuff in ancient times, so who knows [15:09:32] "What is the fourth digit of the number two hundred twenty-eight million eight hundred fifty-seven thousand two hundred nineteen counting from the left?" where is Emufarmers hmpf http://elinux.org/Special:RequestAccount [15:09:57] http://elinux.org/index.php?title=Special:Log/import&offset=&limit=500&type=import&user= [15:10:15] lots of imports from mw.org [15:10:53] :) [15:52:22] Hi [15:52:48] Where can I get HELP with a user name problem? I would like to be able to speak to a Wikipedia admin or somebody who could solve my doubts about an issue of my account. [15:56:22] Hiroki_: On your own wiki? Or on Wikipedia? [15:56:25] What's the problem? [15:57:12] I guess it's on Wikipedia. On my Wikipedia account [16:01:07] and what's the issue? [16:05:14] about 10 months ago, I created my Wikipedia account and Modified an article (whole article modification). Ever since, I guess that as my text was precise, nobody changed nearly anything. This was, as I say, many months ago. Last week, in reference to that article, I created a new Article but I did some things wrong (such as forget to put References and some other things). I recieved the correspondent Messages that I had to change th [16:05:47] your message got cut off there [16:07:12] However, as I'm not used at doing this, it was difficult to understand all the things I had to "accomplish". The strange fact is that I started to recieve messages that my account was being Closed/Blocked due to it's user name, that is not "legal" on Wikipedia policy. [16:08:16] And so, I understand that I have to change my User name, but I don't understand why suddenly they have Closed my account when this User name has not been changed since I created the account 10 months ago [16:09:53] What was the username? [16:10:05] I mean, if the problem is the User name, why didn't they tell me then (10 months ago) ? [16:10:25] Where's the message? [16:10:40] There were some renaming, and if yours conflicted... [16:12:25] the message is in the "Talk" tab, in Spanish "DiscusiĆ³n" [16:13:51] Link? [18:18:21] Hi, anyone have experience/views on using a wiki for old-school government type documents that are minuted? [18:20:14] tms34: wikis are designed to be edited. [18:24:15] MTres19: so are files, although it is more like appending. [19:11:10] tms34: Ah, I thought you meant like an archive for the files. [19:18:30] MTres19: The main features I want are workflows with routing and approval and comments with overall change management/auditing. Easy external linking/referencing too. [19:19:04] !e Moderation [19:19:04] https://www.mediawiki.org/wiki/Extension:Moderation [19:21:34] tms34: For auditing, see above ^ [19:21:57] Comments typically go on a corresponding talk page with MediaWiki. [20:26:34] * Nemo_bis just noticed that lowercase first letter doesn't get redirected at https://wiki.archlinux.org/index.php/main_page [20:30:42] does not seem to be $wgCapitalLinks or something like that? [20:35:35] "case": "first-letter",