[01:19:49] <MirahezeRelay> <pixldev> Hey @blankeclair [01:19:58] <BlankEclair> meow? [01:20:51] <MirahezeRelay> <pixldev> Would you possibly be open in a bit to help me with something, I'll need an OAuth consumer approved on beta I believe [01:21:20] <MirahezeRelay> <pixldev> I wanna try and set up https://github.com/enwikipedia-acc/waca/tree/master [01:22:02] <BlankEclair> oki ^_^ [01:22:15] <MirahezeRelay> <pixldev> let me get docker on this new laptp [01:25:53] <MirahezeRelay> <pixldev> blah, me no likely this install process [01:26:12] <BlankEclair> saddie [01:26:29] <MirahezeRelay> <pixldev> https://docs.docker.com/engine/install/fedora/#set-up-the-repository [01:26:30] <MirahezeRelay> <pixldev> welp [01:26:34] <MirahezeRelay> <pixldev> :nutmoji: [01:27:10] <MirahezeRelay> <pixldev> this is one way to stay awake to readjust from the jetlag [01:27:15] <MirahezeRelay> <pixldev> its [01:27:15] <MirahezeRelay> <pixldev> what [01:27:23] <MirahezeRelay> <pixldev> 3 am in germany? [01:27:51] <BlankEclair> what's docker CE? docker community edition? [01:31:01] <MirahezeRelay> <pixldev> probably [01:31:29] <MirahezeRelay> <pixldev> i think you only need a paid if you're a company with over 250 employees or 10MM in monies [01:31:44] <BlankEclair> da faq [01:31:46] <BlankEclair> docker is not foss? [01:31:55] <MirahezeRelay> <pixldev> k, docker prob installed [01:32:00] <MirahezeRelay> <pixldev> uuuuu [01:32:08] <MirahezeRelay> <pixldev> i think this is for docker desktop what i said [01:32:12] <MirahezeRelay> <pixldev> now im confused [01:32:59] <MirahezeRelay> <pixldev> I think Docker main is, they have attachments that may not be, like Scout [01:33:13] <MirahezeRelay> <pixldev> V [01:33:14] <MirahezeRelay> <pixldev> https://docs.docker.com/billing/ [01:33:46] <BlankEclair> https://en.wikipedia.org/wiki/User:Locke_Cole [01:33:47] <BlankEclair> o- oh [01:34:14] <MirahezeRelay> <pixldev> huh [01:34:18] <MirahezeRelay> <pixldev> [1/2] huh [01:34:18] <MirahezeRelay> <pixldev> [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363326879959875664/image.png?ex=6805a099&is=68044f19&hm=ce02eaccb5abe801a3ae622a80b89dd8c10749872500b2997b06ca9fab7b3aaf& [01:36:23] <BlankEclair> gay discord, gay discord [01:36:52] <MirahezeRelay> <pixldev> very good very wiki https://en.wikipedia.org/wiki/Docker_(software)#Licensing_model [01:36:55] <MirahezeRelay> <notaracham> Giscord [01:38:01] <MirahezeRelay> <pixldev> okay, lets try actually composing this thing, I need a test dir [01:38:20] <MirahezeRelay> <notaracham> [1/2] My current misuse of brain cycles is defining what goes on beeza, a pizza for bees. [01:38:21] <MirahezeRelay> <notaracham> [2/2] Enjoy this thought exercise while containerizing all the things. [01:39:22] <MirahezeRelay> <pixldev, replying to notaracham> Pardon [01:39:30] <MirahezeRelay> <pixldev> 🧐 [01:40:40] <MirahezeRelay> <notaracham> Fig, honey, lavender and marjoram are all high contenders [01:42:20] <MirahezeRelay> <pixldev> [1/2] waca.... wava....... wawa......... [01:42:20] <MirahezeRelay> <pixldev> [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363328902042226851/image.png?ex=6805a27b&is=680450fb&hm=2ec00f6e03c6b16567bf151b090d7f6c7d5818cb838fac0831c81881cbb39222& [01:44:08] <MirahezeRelay> <pixldev, replying to notaracham> fuck it, we sudo docker for now [01:44:15] <MirahezeRelay> <pixldev> whoops [01:44:22] <MirahezeRelay> <pixldev> wrong reply :Nervous: [01:44:33] <MirahezeRelay> <pixldev> sorry Notz [01:47:36] <MirahezeRelay> <pixldev> okay, working ish [01:47:46] <MirahezeRelay> <pixldev> @blankeclair you may like this [01:48:07] <MirahezeRelay> <pixldev> https://cdn.discordapp.com/attachments/1006789349498699827/1363330357860106301/image.png?ex=6805a3d6&is=68045256&hm=92ef3cea857f56225a124b837cd58fea4c7cee62bddee6d8edc09bba71fbcfbd& [01:51:17] <MirahezeRelay> <pixldev> there we go, remember kids, always try turning it off and back on again [01:54:09] <MirahezeRelay> <pixldev> [1/2] @notaracham that was. very easy [01:54:10] <MirahezeRelay> <pixldev> [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363331879495008478/image.png?ex=6805a541&is=680453c1&hm=0e93c7e2e7a26e9afc2288f9a75a9c0a972084fa5d33bc60c4e4e10b669fabbe& [01:54:52] <MirahezeRelay> <pixldev> deWikipediaizing the text will take a little bit if we wanna use it [01:55:49] <MirahezeRelay> <pixldev> [1/2] On second thought [01:55:50] <MirahezeRelay> <pixldev> [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363332298539401216/image.png?ex=6805a5a5&is=68045425&hm=69604155c00a766dedefc240b35bce8ffd6dcf2e6cbbe9a05e4294851c9c899f& [01:56:58] <MirahezeRelay> <pixldev> [1/2] may haps not, at least on the tech side [01:56:58] <MirahezeRelay> <pixldev> [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363332586113339593/image.png?ex=6805a5ea&is=6804546a&hm=2ee5811d2546ffde4fe9e3996258a1fe76ef1864f42a291a7480d343865b4e34& [01:58:18] <MirahezeRelay> <aeywoo, replying to pixldev> Lemme guess, you don [01:58:40] <MirahezeRelay> <pixldev> We'll see [01:58:50] <MirahezeRelay> <aeywoo> Well, I can do that for you if you'd like. [01:59:02] <MirahezeRelay> <aeywoo> It'd be best to make a repo for the changes though. [01:59:46] <MirahezeRelay> <pixldev> likely, or a patch to easily recreate the database changes [02:00:01] <MirahezeRelay> <pixldev> but being able to change so much in the UI is really nice [02:00:10] <MirahezeRelay> <aeywoo> Well, whatever it is. Let me know, and I can do it for you. [02:00:18] <MirahezeRelay> <aeywoo> You don't have to do any of it if you don't wanna. [02:00:26] <MirahezeRelay> <pixldev> https://cdn.discordapp.com/attachments/1006789349498699827/1363333458247811254/image.png?ex=6805a6b9&is=68045539&hm=b23dfe92491937ba4836f0a29eb5c7450b8aa652ed961fe4dde0dad0b48c886d& [02:00:40] <MirahezeRelay> <pixldev> Right now, I wanna see if I can get it to like, make an account lol [02:00:56] <MirahezeRelay> <pixldev> but very much appreicated Aeywoo, bet [02:02:06] <MirahezeRelay> <pixldev> I did just realize though [02:02:48] <MirahezeRelay> <pixldev> We'd likely need to hack in a way to automatically attach created accounts to specific wikis, since Global Blocking still blocks autocreation [02:03:15] <MirahezeRelay> <pixldev> We really should talk to someone at the Foundation about fixing that [02:05:29] <BlankEclair> > [20/04/2025 11:42] <MirahezeRelay> <pixldev> [1/2] waca.... wava....... wawa......... [02:05:31] <BlankEclair> awawawawa [02:05:50] <MirahezeRelay> <pixldev> mama mia [02:06:14] <MirahezeRelay> <pixldev> this thing has both TOTP anf yuri key support! [02:06:31] <MirahezeRelay> <pixldev> this has to be some kind of framework right [02:07:09] <BlankEclair> OwO [02:07:22] <MirahezeRelay> <pixldev> Laravel maybe? [02:08:03] <MirahezeRelay> <pixldev> nay? [02:08:11] <MirahezeRelay> <pixldev> [1/24] ```json [02:08:11] <MirahezeRelay> <pixldev> [2/24] "require": { [02:08:11] <MirahezeRelay> <pixldev> [3/24] "php": ">=7.4", [02:08:12] <MirahezeRelay> <pixldev> [4/24] "smarty/smarty": "^v4.3.1", [02:08:12] <MirahezeRelay> <pixldev> [5/24] "twitter/typeahead.js": "^0.11.1", [02:08:12] <MirahezeRelay> <pixldev> [6/24] "fortawesome/font-awesome": "~6.7.1", [02:08:12] <MirahezeRelay> <pixldev> [7/24] "spomky-labs/otphp": "^10.0", [02:08:13] <MirahezeRelay> <pixldev> [8/24] "bacon/bacon-qr-code": "^2.0", [02:08:13] <MirahezeRelay> <pixldev> [9/24] "paragonie/constant_time_encoding": "^2.0", [02:08:13] <MirahezeRelay> <pixldev> [10/24] "drvic10k/bootstrap-sortable": "^2.1", [02:08:14] <MirahezeRelay> <pixldev> [11/24] "wikimedia/common-passwords": "^0.5", [02:08:14] <MirahezeRelay> <pixldev> [12/24] "dropbox/zxcvbn": "^4.4", [02:08:14] <MirahezeRelay> <pixldev> [13/24] "bjeavons/zxcvbn-php": "^1.1", [02:08:15] <MirahezeRelay> <pixldev> [14/24] "ext-openssl": "*", [02:08:15] <MirahezeRelay> <pixldev> [15/24] "ext-dom": "*", [02:08:16] <MirahezeRelay> <pixldev> [16/24] "ext-pdo": "*", [02:08:16] <MirahezeRelay> <pixldev> [17/24] "ext-json": "*", [02:08:17] <MirahezeRelay> <pixldev> [18/24] "ext-curl": "*", [02:08:17] <MirahezeRelay> <pixldev> [19/24] "ext-mbstring": "*", [02:08:18] <MirahezeRelay> <pixldev> [20/24] "ext-simplexml": "*", [02:08:18] <MirahezeRelay> <pixldev> [21/24] "mediawiki/oauthclient": "^2.0", [02:08:19] <MirahezeRelay> <pixldev> [22/24] "php-amqplib/php-amqplib": ">=3.0", [02:08:19] <MirahezeRelay> <pixldev> [23/24] "league/commonmark": "^2.4" [02:08:20] <MirahezeRelay> <pixldev> [24/24] },``` [02:08:23] <MirahezeRelay> <blankeclair> nyay :3 [02:08:36] <MirahezeRelay> <blankeclair> ohey, zxcvbn [02:08:43] <MirahezeRelay> <blankeclair> mfw it's depended upon twice [02:10:05] <MirahezeRelay> <pixldev> translation plz [02:12:21] <MirahezeRelay> <blankeclair, replying to pixldev> which message [02:13:10] <MirahezeRelay> <blankeclair, replying to blankeclair> portmanteau of "nya" and "yay", accompanied by ":3", signifying a cat face [02:14:19] <MirahezeRelay> <aeywoo, replying to blankeclair> I think they meant zxcvbn [02:14:45] <MirahezeRelay> <blankeclair> i was somewhat surprised to see zxcvbn [02:15:26] <MirahezeRelay> <blankeclair> https://github.com/dropbox/zxcvbn [02:25:37] <MirahezeRelay> <pixldev> beta is [02:26:21] <MirahezeRelay> <pixldev> [1/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363339981103435876/image.png?ex=6805accd&is=68045b4d&hm=d35577c7366b5c1ac4b26b180cbd0f180b410587886fc62c32ddce8ccbc9d9e3& [02:26:22] <MirahezeRelay> <pixldev> [2/2] https://cdn.discordapp.com/attachments/1006789349498699827/1363339981351031035/image.png?ex=6805accd&is=68045b4d&hm=60544d723922dffb86df866bc13b61d8e350fd2e4ec5f563c022c0bc0edf61df& [02:26:22] <MirahezeRelay> <pixldev> fun [02:26:49] <MirahezeRelay> <pixldev> huh, now i know what disabled global groups look like [02:29:59] <MirahezeRelay> <pixldev> aaaaand its 10:30 and my motivation to continue dropped like a rock [02:30:04] <MirahezeRelay> <pixldev> hopefully for just the night [02:30:07] <MirahezeRelay> <pixldev> i should eep [02:30:44] <MirahezeRelay> <notaracham> A beeza for your troubles [02:31:04] <MirahezeRelay> <pixldev> beeza? [02:31:56] <MirahezeRelay> <pixldev> I need to test more and figure stuff out but, I really think we should use Wikipedia's account creation system, it seems super robust and customizable, and built for this [02:32:49] <MirahezeRelay> <pixldev> The main thing is I'm not super sure how Google email will play with it [02:33:10] <MirahezeRelay> <pixldev> There's also some things set to be mocked in beta that will be different on prod [04:23:12] <MirahezeRelay> <cosmicalpha> okay so I rewrote ManageWiki about 60-70% of what I want to do already lol. Didn't mean to do so much in a single patch again... [04:23:43] <MirahezeRelay> <cosmicalpha> We plan to deploy it tomorrow and hopefully nothing goes wrong. [04:24:02] <MirahezeRelay> <cosmicalpha> It does fix 37 bugs though. Just hope it doesn't introduce that many more lol [07:33:09] <MirahezeRelay> <aeywoo, replying to cosmicalpha> Oh nice, what's the worst of them? [07:34:09] <MirahezeRelay> <cosmicalpha> Deoending on how you define worst. One if them is a security vulnerability I can't yet disclose until it's been deployed. [07:35:47] <MirahezeRelay> <cosmicalpha, replying to aeywoo> https://github.com/miraheze/ManageWiki/pull/544#issue-2975311690 mentions most of the major bugs that are fixed. [07:36:03] <MirahezeRelay> <cosmicalpha> I few other minor ones I didn't mention there though. [07:38:40] <MirahezeRelay> <rhinosf1, replying to cosmicalpha> Can we have a draft security advisory and get a CVE request in? [07:38:52] <MirahezeRelay> <cosmicalpha> I can file one tomorrow. [07:39:04] <MirahezeRelay> <cosmicalpha> Because yes this one needs a CVE [07:47:06] <MirahezeRelay> <aeywoo> Hey @cosmicalpha, did you see what I pinged you about in #general yesterday or so about. [07:47:46] <MirahezeRelay> <cosmicalpha> Uh I did but I can't remember what exactly you asked as I was busy at the time then forgot to look back at it. I apologize. [07:48:40] <MirahezeRelay> <cosmicalpha> ahhh [07:50:46] <MirahezeRelay> <cosmicalpha> Let me discuss more with other members of the team first. I can see a case for you having access with all the work you've done in PRs etc... but still need to talk with others first. [08:39:25] <MirahezeRelay> <aeywoo, replying to cosmicalpha> Alrighty, thanks. [10:07:05] <MirahezeRelay> <rhinosf1> @aeywoo how much MW experience do you have? [10:07:21] <MirahezeRelay> <rhinosf1> I kinda wonder if we could have test access if you sign an NDA [10:07:30] <MirahezeRelay> <rhinosf1> To do a bit of mentoring in our shell tools first [10:07:54] <MirahezeRelay> <rhinosf1> Not that I don't trust you [10:08:26] <MirahezeRelay> <rhinosf1> But I think we should have a better onboarding with tech so maybe try with you [10:09:58] <MirahezeRelay> <rhinosf1> I think as long as the deploy key isn't on test151 we could do that [10:10:14] <MirahezeRelay> <rhinosf1> As a let you play and be mentored for a few weeks before full prod [10:23:19] <MirahezeRelay> <aeywoo, replying to rhinosf1> In which areas? I'm pretty adept with setting up a functioning MediaWiki instance, configuring it, I've got some good experience with Linux CLI. I know how to use composer, how to manually apply patches to core MW etc. [10:25:54] <MirahezeRelay> <aeywoo> I don't fully understand PHP so I can't make extensions and stuff, but I'm sure I can get the hang of basic functions and stuff. [10:33:01] <MirahezeRelay> <blankeclair, replying to rhinosf1> deploy key is only on mwtask181 _iirc_ [10:33:55] <MirahezeRelay> <rhinosf1, replying to blankeclair> Good [10:34:03] <MirahezeRelay> <aeywoo, replying to blankeclair> Don't mistakenly rename the two to fix that. [10:34:07] <MirahezeRelay> <blankeclair> double check before relying on me x3 [10:34:16] <MirahezeRelay> <blankeclair, replying to aeywoo> it's based on hiera iirc [10:42:41] <MirahezeRelay> <aeywoo, replying to blankeclair> Puppet Hiera? [10:44:16] <MirahezeRelay> <rhinosf1> Ye [10:45:21] <MirahezeRelay> <pixldev, replying to cosmicalpha> beta?? [10:45:48] <MirahezeRelay> <aeywoo, replying to pixldev> Nah, prod. [10:46:00] <MirahezeRelay> <pixldev, replying to cosmicalpha> In that case as a courtesy we should probably notify the people we know use ManageWiki (ie WikiOasis i think) [10:46:41] <MirahezeRelay> <aeywoo, replying to pixldev> He prob already told them. [10:47:10] <MirahezeRelay> <aeywoo> But if not, then yes subscribe one of them to the Phab CVE task. [10:52:03] <MirahezeRelay> <pixldev, replying to aeywoo> :[ [13:37:15] <MirahezeRelay> <originalauthority> I think cosmic went to bed probably but id like to know what the CVE is lol since I'm using ManageWiki also [13:54:06] <MirahezeRelay> <aeywoo, replying to originalauthority> Didn't you say you just converted Telepedia over to `$wgSharedDB`? [13:54:15] <MirahezeRelay> <aeywoo> :HMMM: [13:54:31] <MirahezeRelay> <originalauthority, replying to aeywoo> In the process of [13:54:46] <MirahezeRelay> <originalauthority> But ManageWiki can support non-central auth implementations [13:55:01] <MirahezeRelay> <originalauthority> Just a few hacks needed to the creation flow in CreateWiki [13:56:13] <MirahezeRelay> <originalauthority> Which can actually probably be upstreamed because create wiki currently only runs createAndPromote if centralauth is installed which leads to users not getting rights when central auth isnt installed but theres no reason create and promote cant run for non-CA implementations [13:59:46] <MirahezeRelay> <zppix> That sounds like a pain [14:00:34] <MirahezeRelay> <originalauthority> What does? [14:01:35] <MirahezeRelay> <zppix> Hacking CW and MW [14:02:26] <MirahezeRelay> <originalauthority> Yeah inconvenient lol [14:02:43] <MirahezeRelay> <originalauthority> I accidentally merged my changes into Miraheze's copy a few weeks ago lol [14:02:50] <MirahezeRelay> <zppix> Nice [14:03:09] <MirahezeRelay> <aeywoo, replying to originalauthority> There are no accidents. [14:03:20] <MirahezeRelay> <aeywoo> https://tenor.com/view/mmmm-monkey-monkey-ug-master-oogway-oogway-gif-19727561 [14:03:20] <MirahezeRelay> <originalauthority> I blame Github UI tbf [14:22:00] <MirahezeRelay> <pixldev, replying to originalauthority> How [14:29:23] <MirahezeRelay> <originalauthority> Because when you have a fork and a merge conflict, and then try fix it in the github ui by opening a PR, when you go to merge that PR back in it automatically selects the original repo for the request so I guess I didn't change that lol [14:29:35] <MirahezeRelay> <originalauthority> Although I couldve sworn that i did lol [15:02:04] <MirahezeRelay> <notaracham, replying to originalauthority> Oh have you been keeping tabs on/gotten any early view of the Managewiki rewrite that CA is pulling together? Big fixes to a lot of longstanding problems. 😄 [15:02:29] <MirahezeRelay> <originalauthority> Not really [15:02:49] <MirahezeRelay> <originalauthority> I had a quick look at the PR but was on mobile and was stressing me out lol [15:03:21] <MirahezeRelay> <notaracham> Yeah, dude's put in a crazy amount of work in a short period of time but uh... probably worth letting us be the crash test dummies on this one. [15:03:44] <MirahezeRelay> <notaracham> Biggest thing I'm excited about is remote management of more beyond just managewiki core [15:04:27] <MirahezeRelay> <notaracham> (Selfishly makes my tasks easier without forcing a bunch of local attaches) [15:04:33] <MirahezeRelay> <originalauthority> That sounds familiar i added that in my alternative to managewiki tooo heh [15:36:21] <MirahezeRelay> <rhinosf1> @notaracham once that's live we should have a debate whether all steward MW actions should be done on meta [15:37:11] <MirahezeRelay> <notaracham> Yeah, the biggest argument against (local documentation of actions) is potentially getting solved with this, CA's looking at relaying logged changes to both meta and local [15:37:50] <MirahezeRelay> <rhinosf1> Ye that's a big argument [15:38:16] <MirahezeRelay> <rhinosf1> But I'd probably rate global ManageWiki rights as a medium level security risk [15:38:37] <MirahezeRelay> <rhinosf1> Not high because no PII involvement [15:39:10] <MirahezeRelay> <notaracham> I'd prefer on meta if possible, the more local attaches a steward user account has, the greater risk of getting locked out by db errors when things go sideways [15:39:26] <MirahezeRelay> <notaracham> As we've seen happen a few times. Heck I'm already above 2k attaches [15:39:55] <MirahezeRelay> <notaracham> Not sure if the final solution fully avoids a local attach, but 🤷 [15:42:15] <MirahezeRelay> <pixldev, replying to notaracham> PRAISE BE [15:43:18] <MirahezeRelay> <rhinosf1, replying to notaracham> I'd prefer meta too [15:43:27] <MirahezeRelay> <rhinosf1> Easier to audit and control meta [15:54:02] <MirahezeRelay> <aeywoo> Yeah, I mean it just makes sense to have all central actions on meta. [15:54:13] <MirahezeRelay> <aeywoo> It's like what Gamepedia intended Hydra to be, but they never fully fleshed it out. [15:54:32] <MirahezeRelay> <aeywoo> I think part of it was on meta, but I'm not sure. [16:10:28] <MirahezeRelay> <rhinosf1, replying to aeywoo> It's better for security and auditing too [16:12:12] <MirahezeRelay> <aeywoo, replying to rhinosf1> Yes, keep everything on meta, prevents users from XSS'ing login from other wikis that can be accidentally misconfigured. [16:12:39] <MirahezeRelay> <rhinosf1> Not really concerned about accidents [16:12:55] <MirahezeRelay> <aeywoo> Also, there could be certain extensions that get found with a fatal XSS. [16:13:10] <MirahezeRelay> <aeywoo> Having only stock-standard extensions (Wikimedia ones) prevents this (hoepfully). [16:13:11] <MirahezeRelay> <rhinosf1> I'm more concerned about malicious attempts to do things [16:15:00] <MirahezeRelay> <aeywoo> Definitely would be easier to lock down any crucial API requests per usergroup on Metea. [18:01:57] <MirahezeRelay> <originalauthority, replying to notaracham> We'd need a custom log iirc special from Special:Log, I've tried this before with no luck overriding the database that log events are sent to and it throws an error that you cannot use another database domain [18:11:21] <MirahezeRelay> <rhinosf1, replying to originalauthority> That sucks [18:16:02] <MirahezeRelay> <cosmicalpha, replying to originalauthority> I've already done it in ImportDump, basically just make a job that logs, and trigger it on the remote wiki. [18:16:37] <MirahezeRelay> <originalauthority> I guess that works lol [18:16:45] <MirahezeRelay> <originalauthority> I was extending the logg class lol [18:17:03] <MirahezeRelay> <cosmicalpha> Alternatively just insert into the database directly lol [18:19:16] <MirahezeRelay> <cosmicalpha, replying to notaracham> This will be deployed this week btw. I'll have remote logging done in a couple days then this will be deployed. [18:19:56] <MirahezeRelay> <pixldev, replying to cosmicalpha> On beta first right [18:20:41] <MirahezeRelay> <cosmicalpha, replying to pixldev> Yeah lol. I've tested my current ManageWiki PR more than 500 times on beta lol. Hopefully it's good to go as it's about to be deployed here soon.... [18:21:33] <MirahezeRelay> <cosmicalpha> I found a huge problem and spent most of yesterday fixing it — if it was deployed we'd be dealing with data corruption. That's fixed at least now... [18:24:06] <MirahezeRelay> <cosmicalpha> I found a few typos in overridedefault in config when testing also noticing things dont exactly work right by default lol [18:51:12] <MirahezeRelay> <pixldev, replying to cosmicalpha> You’re taking a backup right [18:51:33] <MirahezeRelay> <cosmicalpha> I'm dumping mhglobal now [18:53:36] <MirahezeRelay> <cosmicalpha, replying to pixldev> and dump finished... [18:59:33] <MirahezeRelay> <cosmicalpha> Well... here we go hope nothing goes wrong... [18:59:39] <MirahezeRelay> <pixldev, replying to cosmicalpha> What about the other ones… [18:59:45] <MirahezeRelay> <pixldev> Like all the local ManageWiki configs [18:59:51] <MirahezeRelay> <cosmicalpha> managewiki doesn't touch any of the other ones. [19:00:17] <MirahezeRelay> <cosmicalpha> local managewiki configs are stored in mhglobal.mw_settings/namespaces/permissions [19:01:01] <MirahezeRelay> <pixldev, replying to cosmicalpha> …. [19:01:07] <MirahezeRelay> <pixldev> I hate that a lot [19:01:36] <MirahezeRelay> <cosmicalpha> Its deployed! [19:02:15] <MirahezeRelay> <cosmicalpha, replying to pixldev> its necessary for remote management [19:02:39] <MirahezeRelay> <cosmicalpha> they all have wiki db keys so like s_dbname, perm_dbname, ns_dbname [19:09:02] <MirahezeRelay> <pixldev, replying to cosmicalpha> Any stuff new In features for most users or just cleanup [19:10:27] <MirahezeRelay> <cosmicalpha, replying to pixldev> That'll come more this next week. It does add some functionality like removing permissions that no longer exist (IE extensions that have been disabled), as well as fixes the group delete button rather than relying on removing all permissions. It also redirects back to main ManageWiki module page when a group or namespace is deleted. [19:10:53] <MirahezeRelay> <cosmicalpha> One thing I'll add this week is warn/disallow removing managewiki-permissions from the last/only group that has it. [19:11:37] <MirahezeRelay> <pixldev> Good one [19:12:47] <MirahezeRelay> <pixldev> Maybe see if you can improve the UI/UX, some areas aren’t very intuitive probably [19:16:01] <MirahezeRelay> <cosmicalpha> Indeed [19:32:08] <MirahezeRelay> <cosmicalpha> https://github.com/miraheze/ManageWiki/security/advisories/GHSA-gg42-cv66-f5x7 is the security advisory for the vulnerability I mentioned yesterday btw [19:33:44] <MirahezeRelay> <pixldev, replying to cosmicalpha> I presume you already reached out to OA and WikiOasis to update [19:34:51] <MirahezeRelay> <cosmicalpha> I told OA in private before it was public since they have an NDA here. However I'm not sure who to reach our to re WikiOasis [19:35:46] <MirahezeRelay> <pixldev, replying to cosmicalpha> Uh, @suzuneu I think [21:44:34] <MirahezeRelay> <raidarr> yeah, waki would be best for that [22:56:17] <MirahezeRelay> <the_globe12> yep