[00:17:23] Probably want to change your password [00:26:37] Hello Despatche_! If you have any questions, feel free to ask and someone should answer soon. [00:47:06] Hello HasV3_! If you have any questions, feel free to ask and someone should answer soon. [01:27:26] Hello hb1290! If you have any questions, feel free to ask and someone should answer soon. [01:52:20] Hello HasV3__! If you have any questions, feel free to ask and someone should answer soon. [03:13:25] @Lake I thought about that and I may make use of that but might also add own actual themes to Cosmos itself not sure yet. [03:53:16] Hello mweorzzzzzzzz! If you have any questions, feel free to ask and someone should answer soon. [05:34:23] Do we have Extension:DeleteBatch? I can't find it in Special:ManageWiki/extensions. [05:35:37] @CptViraj, it's not added for performance and/or security reasons. We do, however, have the DeleteBatch.php maintenance script. You can request a run on Phabricator [05:41:18] I see, ty. [05:47:20] CptViraj, np 🙂 [06:15:27] Tooltips gadget doesn't seem to have pride of place in Mirheze documentation and it seems to be such a useful and wonderful thing. I am wondering if there are valid reasons why it is not installed by default or if there are substantial issues with it. [06:16:55] hello I have problem with galleries, I set them to be 200px x 200px per image but most of them are still bigger than that (images also are only 200px x 200px, so I don't really understand why it's making it bigger) only last one or two are in original size [07:07:40] So, i activated the rss-plugin (under "parser hooks"), but i can't ssem to find the place where i can set $wgRSSAllowLinkTag (the links in the rss-feed show up as plain-html, and i guess that this variable has to be set to "true" to fix that). Can I even set this myself? [12:34:39] HasV3__: I just checked and it looks like you'll need to open a phabricator ticket to get that set [12:39:39] Uploaded file: https://uploads.kiwiirc.com/files/8c31b1dd0ba49128b622a3db803bfe16/image.png [12:39:48] Uploaded file: https://uploads.kiwiirc.com/files/2d3f961fd0a67c0168f7bbd3eec8c457/image.png [12:39:56] this is not micky mouse club house [12:40:04] why is there disney refrences [12:57:50] Is anyone here familiar with oauth2 using Extension:Oauth ? I'm getting a HTTP 500 error when requesting an access token and am out of ideas what could cause it 😦 [13:09:55] chrs: what did they need setting? [13:11:11] RhinosF1: $wgRSSAllowLinkTag [13:23:38] Ah [13:23:46] Yeah task best [16:36:05] Hello GrahamSH! If you have any questions, feel free to ask and someone should answer soon. [16:36:49] Hallo [17:12:06] river, why did you attempt to login to my NickServ? [17:13:52] to ghost your account [17:14:09] msg NickServ IDENTIFY Bukkit [17:14:27] Yeah uh [17:14:47] That was not even my pass [17:14:59] I just copied and pasted what the message told me to say [17:15:34] msg NickServ IDENTIFY Bukkit [17:15:41] I forgot to enter my paddeord [17:15:46] Psesword [17:15:51] Password [17:25:33] hi [17:25:37] hi [17:30:13] hi [17:30:14] Hello Guest065! If you have any questions, feel free to ask and someone should answer soon. [17:30:24] andrew13: Guest065: welcome [17:30:43] its the same [17:30:54] Uploaded file: https://uploads.kiwiirc.com/files/2be2d8aa464299da2dbf7fc0ce83d1d8/image.png [17:31:21] alright [17:32:09] can i connect to irc on discord [17:32:27] you can't use IRC with the discord client, but these channels are relayed to the IRC channels [17:33:28] There's really no need to spam all of that on here. [17:34:47] i can acesss #miraheze-offtopic [17:35:09] can or can't? [17:35:15] can [17:35:48] andrew13: what message [17:35:54] .mhca andrew13 [17:35:55] https://meta.miraheze.org/wiki/Special:CentralAuth/andrew13 [17:36:04] question for the stewards/sysadmins: if I wanted to assign the interwiki right to a locally managed group (probably autopatrolled), would a phab ticket to do so be accepted? [17:36:37] my name is andrew071117 not andrew13 [17:36:37] You'd have to have stewards use the Interwiki group [17:37:05] this is my discord cilent [17:37:06] https://cdn.discordapp.com/attachments/435711390544560128/848616014883323914/unknown.png [17:37:13] andrew13: what message you get when accessing #miraheze-offtopic [17:37:36] discord [17:37:41] I was referring to do so with a manual $wgGroupPermissions assignment [17:37:41] Oh you're in now [17:38:04] chrs: I doubt custom groups will be accepted because that's how the rules are [17:38:13] currently planning a rework of the permissions to where most trusted users would get most permissions and I wanted to see if this could be included [17:38:58] dmehus: ^ [17:41:10] what reley mean [17:42:10] chrs, what do you mean? [17:42:50] dmehus: I want to know if granting the `interwiki` right to `autopatrolled` could be done as part of granting said group most rights [17:43:06] @doug what your irc name [17:43:16] Oh, you mean the `interwiki` user right. I'd have to say no, because global policy restricts it the `interwiki-admin user group [17:43:35] There are also security reasons why SRE also wants to restrict it to being granted only stewards [17:44:01] but it's not difficult to hold a local election, let it run a few days, and request stewards grant rights [17:44:16] may I ask what those security reasons are? [17:44:24] chrs, DM? [17:44:28] sure [17:44:31] To do with malicious sites being added iirc [17:44:51] RhinosF1: is there anything in particular making that more dangerous than editing javascript? [17:45:07] chrs: depends what you link to [17:45:21] omg [17:45:23] Because you take people off Miraheze [17:45:30] i can see the irc chat on discord [17:45:38] Uploaded file: https://uploads.kiwiirc.com/files/86b7c32988b677572fc1724aef2d5ff7/image.png [17:45:53] Yes that's what a relay does andrew13 [17:45:56] We do have Content Security Policy that can block external scripts from being loaded, though [17:46:03] ^ [17:46:11] what my discord cilnet look like [17:46:13] There is also scary transclusion which is named "scary" for a reason [17:46:20] yeah, ^ [17:47:02] This way, we can monitor if global and local interwiki administrators add a malicious site to Special:Interwiki [17:47:17] what does it mean when my pc takes 15 min to startup and 2 min to start a program always [17:47:50] @dogg, can you move this question to `#miraheze-offtopic-relay` on Discord, please? [17:48:34] How would I need to contact to help me figure out while I'm running into HTTP error 500 on getting an oauth2 access token? [17:48:53] Phabricator [17:49:13] oh alright, I'll create a task [17:49:17] MarkusRost, no clue. I'd probably say JohnLewis or Southparkfan would be your best bets as as the likely OAuth experts [17:50:01] dmehus: it's just a MediaWiki extension [17:50:07] Any of us can read a log [17:50:09] okay so interwiki's can be nearly as dangerous as js editing? [17:50:25] chrs: potentially if you have a malicious site [17:50:37] As it's not monitored amazingly [17:51:44] makes sense then [17:51:51] We're pretty quick at assessing local elections, and technically, the `bureaucrat` can still close the discussion as successful; it just requires a steward to ratify it and effect the results, to ensure it meets the global policy requirement [17:52:22] note that global prerequisites can be used for local `interwiki-admin` [17:52:43] as it's usually easier to qualify with 1,000 global edits [17:52:51] oh there weren't any concerns with speed of verification [17:53:31] s/verification/appointment/ [17:53:31] chrs meant to say: oh there weren't any concerns with speed of appointment [17:53:41] I guess, in theory, we could grant the `interwiki` user right to `autopatrolled` on a specific wiki, but then we'd have to make `autopatrolled` a restricted user group only stewards could grant on that wiki [17:53:43] ah [17:54:02] it was primarily about giving broad access to that specific right [17:54:14] ah [17:54:25] and since there appear to be serious security things with that right [17:54:58] i'll just leave it as is [17:55:12] we did restrict the user and sitewite CSS/JS user rights from being added to `*` and arguably could consider restricting them to `user` even, potentially too [17:55:47] though you could get around that via autopromotion [17:55:51] or is that just a sanity check [17:56:12] for people who don't know how powerful it is [18:00:01] chrs, oh true, yeah, that's a good point, though how would you set an anonymous user to be auto-promoted to a certain advanced user group? I didn't think that was possible [18:00:24] It's possible with registered users because you can define edit and account age thresholds [18:00:31] that was in response to restricting it from the `user` group [18:00:36] oh, right [18:00:38] good point [18:00:51] yeah not much point in restricting it past `user` group then [18:02:58] theroretically a warning somewhere along the lines of "hey this is quite dangerous to give out" could be useful just in case someone think's it's a pretty trivial right could be useful [18:08:26] Hello zap! If you have any questions, feel free to ask and someone should answer soon. [18:09:25] andre13: what theme you're using on your Discord? [18:09:33] probably via BetterDiscord [19:04:32] Is there sucmmy brands wiki here? [19:19:33] You mean Scummy Brands Wiki? [19:20:08] yes [19:20:14] Is it ready [19:20:20] can I have the link? [19:21:07] https://scummybrands.miraheze.org/wiki [19:21:09] [ Main Page - Scummy Brands ] - scummybrands.miraheze.org [20:43:13] Hey Reception|away, can you disable my WikiJS phabricator acc? [20:43:27] I’ve changed to Bukkit [20:44:23] any idea why I'm unable to move titleblacklistlog from sysop to another group? [20:46:00] Is the SRE position still vacant? [20:48:12] Also if I do get the position, would I need to sign an NDA? [20:49:24] Bukkit: which position? [20:50:08] Software Developer [20:52:16] Bukkit, yes and I think so/am not sure [20:52:17] Bukkit: we'll probably discuss it at the next meeting. We can always do with help though. At first, unless you end up working on security stuff. An NDA wouldn't be needed [20:52:59] RhinosF1, yes an NDA would be needed as he's referring to the MWE/SRE Software Developer position on Miraheze Vacancies [20:53:37] Where do I do the NDA thing? [20:53:41] dmehus: I know what role he wants and simply submitting pull requests but more co-ordinated doesn't need an NDA [20:53:57] NDA is not needed unless you have shell access which the position doesn't. [20:53:59] Bukkit, Owen provides the NDA for you to return [20:54:07] We don't intend to give shell access at first at least [20:54:30] We have had 1 other offer of help but there's no limit [20:54:36] The more the merrier [20:54:59] yeah, ideally, a user should have some demonstrated activity on GitHub and Phabricator first, Bukkit [20:55:25] ^ [20:56:00] ^^ That makes sense [20:56:31] § [20:56:34] chrs, oh, really? Could be a right blacklisting issue, but I'm not aware of that. Let me take a look [20:58:20] chrs, title blacklist log is disabled on wikis other than `metawiki` and `loginwiki`, which: [20:58:20] ``` 'wgTitleBlacklistLogHits' => [ [20:58:20] 'default' => false, [20:58:21] 'loginwiki' => true, [20:58:21] 'metawiki' => true, [20:58:21] ],``` [20:58:21] seems to confirm, if I'm reading that right, could that be why? [20:58:28] dmehus: pretty sure that is [20:58:38] RhinosF1, ack, thanks :) [20:58:54] I can look soon but check the rights review task [20:58:58] From a while back [20:59:12] which task was that? [20:59:50] chrs, oh no, it is blacklisted in ManageWiki, per `wgManageWikiPermissionsBlacklistRights` [21:00:09] https://phabricator.miraheze.org/T5735#113553 [21:00:11] [ ⚓ T5735 Audit user rights blacklist ] - phabricator.miraheze.org [21:01:00] https://cdn.discordapp.com/attachments/435711390544560128/848667330519367720/Screenshot_2021-05-30_17-00-20.png [21:01:03] dmehus: ^ [21:01:27] RhinosF1: ack [21:01:40] sysop seems to have it for some reason [21:02:05] chrs, is it coded by default in MediaWiki core to `sysop`? [21:02:10] if so, that'd likely be why [21:02:39] just check, and the extension sets it for sysop by default [21:02:39] It's not enabled anyway [21:02:46] Expect on meta/login [21:03:04] ah that's why titleblacklistlog is disabled to those without an NDA yeah [21:03:09] chrs, ah [21:03:46] Needs added to wgRevokePermissions or wgGroupPermissions [21:04:03] so I should just be safe to delete the group? [21:04:05] Crepusculum: Hrm? I think we figured it out [21:04:11] The managewiki blacklist doesn't remove from default groups. [21:04:12] chrs, delete what group? [21:04:26] Crepusculum: yeah I know :) [21:04:50] dmehus: sysop [21:05:08] chrs, you can, but when I deleted `sysop`, it was still listed in Special:ListGroupRights [21:05:17] so it may still show up there on your wiki [21:05:37] odd [21:05:39] as it's possibly coded as a default user group, regardless of its existence in ManageWiki [21:07:21] basically, when you add users to user groups, you're not using the `userrights` user right. You're using Special:ManageWiki/permissions' delegation which is designed to mimick the behaviour of the `userrights` user right, subject to the limitations and prohibitions specified in `LocalSettings.php` [21:07:54] which I assume it does by adding the groups to $wgAddGroup/$wgRemoveGroups? [21:08:01] yeah [21:08:03] exactly [21:11:38] looks deleting sysop worked properly [21:15:53] chrs, oh, hrm, that's good [21:16:10] maybe that's only on private wikis then where deleting `sysop` is not possible [21:16:27] likely because `sysop` includes the `read` user right on private wikis [21:16:28] maybe because of how managewiki handles the view permission? [21:16:34] yeah [21:16:40] that's what I'm thinking [21:16:47] *read permission [21:16:55] yeah [21:17:58] does it just add the permission to the group once or does it set it by itself? [21:20:44] chrs, what do you mean? If the user right is listed in the applicable LS.php variable for a group, it will appear in Special:ListGroupRights for the group whether or not it is removed from Special:ManageWiki/permissions [21:21:09] in this way, what's set in LS.php is in addition to what's set in Special:ManageWiki/permissions [21:21:49] I was asking whether the resultant permission changes from setting a wiki to private act like a LS.php change or like a crat made the applicable changes in ManageWIki [21:21:57] that's why even if people from `viewmyprivateinfo` or whatever from `*`, it'll still be there [21:22:36] I believe more like the latter, but not quite sure what you mean so might be wrong [21:23:21] s/from/remove [21:23:22] dmehus meant to say: that's why even if people remove `viewmyprivateinfo` or whatever from `*`, it'll still be there [21:24:09] as in, is setting a wiki to private akin to revoking read from * and giving it to member/sysop in ManageWiki, such that you can change it like you would anything else, or akin to setting it in LS.php where what you do in ManageWiki doesn't change anything [21:24:21] oh, I see what you mean [21:25:45] yeah, well `read` can't be set to `*` in ManageWiki as it's blacklisted there, for that reason. ManageWiki handles private/public wikis a bit differently. I think there's a specific configuration, perhaps a hook or something, that controls it [21:26:03] JohnLewis is the creator of ManageWiki and can probably explain how it works better [21:26:03] dmehus: it's a config thing [21:26:07] JohnLewis: ^ [21:26:31] RhinosF1: ack [21:26:53] You cant ever assign read to * via managewiki iirc [21:27:02] yeah [21:27:25] because it's blacklisted from the `*` group in ManageWiki, I think [21:27:38] Miraheze prevents that happening rather than being hardcoded in the software [21:28:17] dmehus: blacklists are all config based [21:28:27] RhinosF1, yeah [21:28:30] hello I have problem with galleries, I set them to be 200px x 200px per image but most of them are still bigger than that (images also are only 200px x 200px, so I don't really understand why it's making it bigger) only last one or two are in original size [21:38:54] I created a phab task for my oauth2 issue (HTTP 500): https://phabricator.miraheze.org/T7386 [21:38:54] [ ⚓ T7386 Internal server error when trying to get an oauth2 access token ] - phabricator.miraheze.org [21:44:37] MarkusRost, okay [21:55:01] @MarkusRost: Could you DM me your IP? [21:55:33] Um sure [21:57:22] The bot are the requests using Wiki-Bot/dashboard (Discord; discord-wiki-bot) user-agent if that helps