[00:55:13] * blackwidowmovie0 greetings [01:09:27] RhinosF1, lol yeah it was only 2:37 pm then. And that's good [02:16:33] @Doug oh thanks. I just want to know if it's possible to have an "inverse" effect with checkboxes on Page Forms [02:16:49] i.e if you select one checkbox, one of the fields disappear [02:21:14] @Lake, oh, I'm not sure. I've never used PageForms. Perhaps I should experiment with it or enable it on TestWiki [02:21:40] * dmehus wonders if @Naleksuh would have any objections to me enabling PageForms on TestWiki :P [02:22:11] Isn't that only for SMW? [02:22:13] with checkboxes there's an option to make an element with an ID appear if checked [02:22:30] works for both SMW and Cargo [02:23:14] Naleksuh, I'm not sure. It's included as one of those SMW extensions, but it's enabled on Miraheze, so I guess it must work? [02:25:02] it works with Cargo, as I said. But don't need to test if you're insecure about it [02:25:06] It looks sort of interesting. Not sure about its use for TestWiki, though. It's kind of nichey, but it does allow for editing of multiple pages using the same template in a spreadsheet-like special page [02:25:20] oh I'm not concerned about security [02:25:24] because, well, you know, it's an extension maintained by the author of widgets [02:25:32] mainly concerned about how widely used it'd be [02:25:46] oh, right [02:26:00] that's not a problem, Lake, Yaron Koren does a lot of good extensions. He interviewed JohnLewis for his podcast [02:26:22] I didn't know that :O [02:26:25] https://www.youtube.com/watch?v=FnNHW0BQ9Z4 [02:26:25] [YouTube] ⁨BTB #31 John Lewis 2019 03 30 Between The Brackets A Mediawiki podcast with Yaron Koren⁩ | 1h 5m 55s | Channel: ⁨Between the Brackets⁩ | 1 views | 2020-12-02 - 05:34:03 [02:26:39] @Lake ^ yeah, @Reception123 told me about it [02:26:55] but I say that sometimes because I've seen some people (not on Miraheze) complained about some security issues in their extensions [02:27:44] but anyway, this form will define my infobox and there is a "gender/sex ratio" field [02:27:51] Lake, yeah, I know some people say that, and I think it's a bit misplaced. There seems to be a rush to paint a developer incorrectly [02:27:59] Lake, oh, cool! :) [02:28:08] but it's also possible for the character in question to be genderless [02:28:28] and it's a boolean field basically, so it needs a checkbox [02:28:34] oh, cool [02:29:13] but the gender field then needs to be hidden to avoid confusion. Not really a big problem, but I think that would be good [03:02:06] Hello, I am here from the 8b8t official wiki, I do want to add to the current investigation into vandalism going on. Anytime one of the stewards or administrators at Miraheze handle vandalism for this wiki, please block them permanently. [03:02:16] I will want to also inform you want kind of community this wiki is about [03:02:26] This is a wiki about a anarchy minecraft server [03:02:52] Of course, while they aren't generally any rules on the minecraft server [03:03:10] This doesn't apply to it's social communication platforms [03:03:15] Such as discord and the wiki [03:03:35] However, they seem to want to obviously ignore this and vandalize anyway [03:03:53] Not knowing it takes less than a minute to revert all actions and block you indefinitely [03:04:25] I mostly believe it's just edgy 12 year olds who think they are causing damage, when in reality their trouble is reverted in no time [03:18:55] @xxEzraBxxx, looking [03:19:06] In future, please see #cvt on Discord for such reports [03:21:30] @xxEzraBxxx, what am I looking at? I'm only seeing one blocked user, or are you wanting help reverting vandalism? [03:25:57] @Void, are you around? I had a look at https://8b8tofficial.miraheze.org/wiki/Special:RecentChanges for @xxEzraBxxx, but am not seeing any meaningful signs of possible abuse or anything that needs reverting. Can you have a double-check? [03:25:59] [ Recent changes - 8b8t Anarchy ] - 8b8tofficial.miraheze.org [03:39:53] It's not as of now [03:40:01] But there have been recent incidents [03:40:22] So I am saying just perm block the users if you ever handle more vandalism on the 8b8t wiki [03:41:02] I should have been more clear that I was talking about future incidents [03:42:59] @xxEzraBxxx, well, we only really globally lock users where's behavioural evidence of abusing multiple accounts or where they're a vandalism only account on more than one wiki. Since they are only active on your wiki, a global lock generally wouldn't be needed. It depends on how severe the vandalism is. I have, however, as you may noticed, globally soft rangeblocked several IPs used by vandals on your wiki, and will keep monitoring your wiki for [03:42:59] vandalism [03:43:30] but yes I will also use longer local blocks for vandals, sure, that's no problem [03:43:52] I was talking about local blocks, yes. [03:43:58] Just ban them indefinitely [03:44:17] @xxEzraBxxx, sure, I can do that. Yeah, we just try and be too nice with short 3 day blocks heh [03:45:54] Well, I can see that has a first punishment [03:45:59] @xxEzraBxxx, I'd also recommend @DarkMatterMan4500 for `autopatrolled` and `rollbacker` on your `8b8tofficialwiki`. He does a lot of good counter-vandalism cross-wiki vandal wiki [03:46:10] @xxEzraBxxx, yeah, definitely [03:46:11] But we are talking about people who play on anarchy servers [03:46:13] and they know better [03:46:19] alright [03:46:22] There's not really any excuse [03:46:30] thank you [03:46:41] @xxEzraBxxx, np [06:42:22] If you do not want to use an extension made by Yaron Koren because one of their extensions had a vulnerability, (some other extensions had other critical vulnerabilities as well, AFAIK) you should not want to use MediaWiki itself or other stuff developed by the WMF either! MediaWiki itself had many vulnerabilities. This does not mean you should stop using it! It is like saying I want to stay away from my computer and everything else [06:42:23] in the world because they might have security issues! [06:44:02] And as @Doug said, it is not right to "paint a developer incorrectly". People learn from their mistakes. 🙂 [06:45:18] ^ :thistbh: (both comments above) [06:57:23] r4356th: None nearly as severe as that extension [06:57:33] MW has their shit together more than Koren [06:57:42] Who, might I add, did *not* learn from his mistakes [07:05:05] Naleksuh: He learnt something from his very first MW extension, I think. [07:05:20] Which was... PageForms [07:05:21] No he just kept publishing stuff with vulnerabilites and never learned any lessons [07:05:25] He was also a prick to everyone [07:05:52] And MW has never had anything anywhere near as severe as Korens stuff [07:05:52] Do you know he made an ext for WMF? [07:06:49] https://www.mediawiki.org/wiki/Extension:TemplateInfo [07:06:49] [ Extension:TemplateInfo - MediaWiki ] - www.mediawiki.org [07:07:35] It was superseded by TemplateData but was not in use for long. [07:09:27] Anyway, I would expect paid devs of a widely used software like MW to have far less vulns than anything else. [07:09:52] That implies that they do not like to do their work properly. [07:10:49] I get that the codebase is huge but hey, they are paid, it's their job! [07:11:20] Nobody is paying Koren to use his extension. [07:31:45] Naleksuh, I think calling someone a "prick" is a bit much, tbh. Let's cut the guy some slack. :) [07:32:46] > Anyway, I would expect paid devs of a widely used software like MW to have far less vulns than anything else. [07:32:46] ^ That's a good point. Yaron's development work is all volunteer, afaik, though he may have received some development grants [13:22:23] @R4356th actually, I do want to use their extensions are so useful [13:22:55] what I'm saying is that developer specifically, from what I know, has some controversies for frequent security breaches in various extensions [14:36:25] Naleksuh: usually, in no situation solely one person is responsible for the introduction of a vulnerability. Marking someone's work as untrustworthy by default is a very hefty action, which could cost someone their job nowadays [14:38:04] Their extensions are pretty useful for me. But I don't know if all these vulnerabilities are true or that frequent, I hope not [14:38:12] I still miss Widgets [14:40:02] vulnerabilities are only introduced or kept if someone has accepted the risk, the risks of pushing the commit to the software were not understood or if people and processes were not capable of performing a review [14:44:07] the developers of the library that was present in Widgets could improve their 'best practices security' documentation, Widgets' developers may consider improving their library review processes and Miraheze should find out why they did not spot the issues with the Widget extension [14:45:43] anyway, sorry if I sounded like I was bashing them for those security issues. Wasn't my intention [14:46:04] shit happens, look at the lessons learned (applies to every party) and promise to do better next time, over [14:47:31] alright, I admire that comment :) [15:40:07] changing topics now... does #iferror work with Files? [15:41:38] I have a field on my infobox about footprints, but only ~30% of the characters have one. So I want to display the footprint if the image exists, but not if the image doesn't exist. Is that possible with this parser function? [18:29:23] * blackwidowmovie0 greetings [18:50:25] @Lake, yeah, that's ok, I know it wasn't your intention at all [22:35:17] ok, I adjusted my info in a different way on PageForms, don't need checkboxes anymore [22:36:22] but now, is it possible to set a value on X template and that value take effect on Y as well (on PageForms specifically)?