[03:27:49] Anyone knowledgeable in cpu hacks consisting of virtual machines, and developer programs?? I need some serious effing help as all phones and cpus are infected with this insane and impressive attack. [03:29:18] for like 6 months. also a lot of viriual drivers remotely porting all my shit to whoever is behind it [03:29:33] does that relate to wikimedia cloud in any way? [03:30:35] i'm pretty sure since i am here, they seem to be using a fake wiki using analytics to harbor information [03:31:21] i'm pretty sure most web browsers are at least partly tampered with [03:32:29] have you guys ever heard of hacks like this? like everything on my devices and computers is emulated/sandboxed. [03:34:21] At the very least, could someone point me in the right direction to get some help with this?? it is difficult to get on secure and helpful sites with this emulatuon and dev tool web browser issue [03:37:14] if you could describe your symptoms, maybe. I still fail to see how it's related to wikimedia cloud [03:41:58] ALL devices are virtual machines, ALL devices Rooted, They are all attached to some server I cannot access, I believe they used my google account, and developer versions of android/microsoft to take over everything. There is so much involved with it I am not sure what to do. They are also recording the audio and video from phones, and computers, and streaming it all to their server. There are like 70 virtual drivers o [03:43:25] (03CR) 10BryanDavis: "recheck" [labs/striker] - 10https://gerrit.wikimedia.org/r/421669 (owner: 10BryanDavis) [03:44:48] (03CR) 10jerkins-bot: [V: 04-1] Order maintainers by cn [labs/striker] - 10https://gerrit.wikimedia.org/r/421669 (owner: 10BryanDavis) [04:13:20] OccupytheLost: maybe just go easy on those drugs, everything will become... clear [04:16:10] lol I assure you this is true, my family and I have had all this for over 6 months. I'm happy to provide proof though [05:43:31] its cloud compuing if anyone is paying attention, could someone point me to the proper channel to resolve this issue please? [05:46:33] !help I am in need of some assistance if anyone could please spare a moment of their time [05:46:33] OccupytheLost: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team [05:47:18] try #tech maybe? [05:47:54] this is really not the right place for you [05:49:51] Thank you good sir, I realize I am not in the right place, however this IRC is the only chat I can access seeing as how I am trapped in a virtual device on a hackers cloud server along with all my phones, and families devices. lol [05:51:40] ok fine explain your issue. what do you mean by rooted? what do you mean by attached? [05:52:12] why do you think someone is recording? [05:54:07] any image / screenshot of unexpected behavior is helpful in diagnosing your issue [05:55:11] I KNOW someone is recording because there are audio hijacking script codes, and a billion other security breaching codes, instant apps,and logs of recorded audio and video files being sent to a remote location. One moment, I will get you some screenshots [05:59:58] Can you Take a system info file, it would be easier since there are many aspects to this [06:00:26] what do you mean by take a system into file? [06:02:02] .NFO file, that has list of drivers, network, virtual machine info, ect [06:02:35] I have never heard of NFO files [06:03:20] https://en.wikipedia.org/wiki/.nfo ? [06:04:20] I have no idea why ^ has anything to do with drivers/network/etc. [06:04:49] I will explain [06:08:30] Came home one day to my new hp laptop acting funny, noticed there were some settings, features that I didn't change, then windows firewall started acting all crazy, my laptop forced itself into an update....hours later, everybody in my houses phone, and computer was Rooted, with scripted code files that are solely for hacking...for example, there is a script that weakens the security of the bluetooth feature on your d [06:09:16] again, what do you mean by rooted? [06:09:22] when an attempt to connect has been made, the script on the devices overrides this security measure, and allows a device to send files via bluetooth without the device owner being notified [06:09:56] the devices were rooted as in intentionally altered to open up the phones system permissions [06:10:22] symptoms? [06:10:51] please be as precise as possible [06:13:31] if you could paste the mentioned scripts somewhere it will also be helpful [06:13:46] Remote computer hijacking (displays of the devices are being cast to remote screens), all web browsing is recorded via chromium google developer systems...with all of our phones, when you access the systems files, your entire android software, hard drive/internal storage, is actually emulated [06:14:50] any type of scripts in particular? there are hundreds [06:14:55] have you contacted customer services of your phone vendor? [06:15:47] I don’t know what you mean by type, though larger scripts will usually contain more information [06:16:25] I am a supervisor for verizon corporate, once a device is rooted, it voids all warrenty/tech support considering the internal system has been tampered with. [06:18:47] audio recording scripts, remote computer scripts, virtual machine scripts, developer program scripts? Is there a way to send a file over this? the system file would contain the logs for every cpu system on my desktop' [06:20:34] you can send through something like https://pastebin.com or https://dpaste.de [06:20:49] you may remove any sensitive information [06:23:02] don't care about the sensistive information anylonger, i have 9 compromised devices lol. purchased a new device, and had comcast bring a new router, yet the new device was rooted, and infected within minutes. [06:24:13] you mean your new router is compromised? [06:32:16] https://dpaste.de/5WH1 [06:39:49] did ya say anything yet?? got booted [06:39:56] doesn't look like a script to me [06:40:00] no [06:41:03] that was the system file thing [06:42:08] I don't read system files, but from a quick read I don't see anything obviously wrong [06:42:54] I have not used Windows as my primary OS in years [06:46:46] okay, this should be an obvious proof, I had 7 android devices, a hp laptop, and hp desktop all factory OS, and now my devices are running Powershell, linux GNU open source code, I have Microsoft Azure, and google developer, office 365...those are all enterprise software programs to mange groups of employee cpu systems, and cost a pretty penny. yet they are all on my devices....my android phoene has 5 shadow internal [06:47:38] what's wrong with Powershell & linux GNU open source code? [06:49:32] if a device suddenly got new software installed that would be indeed weird [06:50:36] but it's not impossible that they are some bundled software [06:51:10] (and no I use none of Microsoft Azure, and google developer, office 365 so have no idea about them) [07:26:34] #%^^$ I am back lol [07:26:40] https://pastebin.com/u6jAXbet [07:41:40] OccupyLost: I don’t know why I’m still awake. That is some log file of some random program. Do you have the script that can demonstrate that something malicious is going on? [07:42:04] logs before you left: 01:47 what's wrong with Powershell & linux GNU open source code? [07:42:14] 01:49 if a device suddenly got new software installed that would be indeed weird [07:42:23] 01:50 but it's not impossible that they are some bundled software [07:42:33] 01:51 (and no I use none of Microsoft Azure, and google developer, office 365 so have no idea about them) [10:35:51] labs database replacement has a long time delay [10:42:02] !help Wikitech default skin is mobile view also on desktop? [10:42:02] Hauskatze: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team [10:45:36] reza1615: what do you mean database replacement? And how long is the delay? [10:46:04] chicocvenancio: https://phabricator.wikimedia.org/T190667 [10:46:18] it has delay about 1 month! [10:46:37] Hauskatze: we do have a mobile skin [10:48:02] reza1615: do you mean the wiki replicas? [10:49:56] reza1615: we have 0 delay right now, https://tools.wmflabs.org/replag/ [10:52:43] chicocvenancio: I just went to wikitech on my desktop pc and the skin by default is the mobile view. I don't think that's right? [10:53:37] The mobile detection might be broken [10:54:03] (03PS1) 10Giuseppe Lavagetto: Add key for _etcd-server-ssl._tcp.v3.eqiad.wmnet.key [labs/private] - 10https://gerrit.wikimedia.org/r/421857 [10:54:40] Or you've somehow set the "use mobile" cookie there Hauskatze [10:54:59] chicocvenancio: if the delay is 0 so there is some thing wrong [10:55:12] (03CR) 10Giuseppe Lavagetto: [V: 032 C: 032] Add key for _etcd-server-ssl._tcp.v3.eqiad.wmnet.key [labs/private] - 10https://gerrit.wikimedia.org/r/421857 (owner: 10Giuseppe Lavagetto) [10:55:22] why 1 month ago edit doesn't reflected on the database? [10:55:55] chicocvenancio: never - it was the first site I visited today after tuning on my computer, and I clear all cookies before shutdown as well [10:56:03] it has happened to me twice already [10:56:09] I'll file a task [10:56:45] Hauskatze: there might be a task already [10:57:38] I can come up with some JS to never go into mobile view for you as a workaround in the meantime Hauskatze [10:58:19] reza1615: I think that query does not look into wikidata at all [10:58:34] chicocvenancio: once I log in that dissapears [10:59:20] chicocvenancio: wikidata is linked to the local wiki. query from local wiki should be show the changes on wikidata [11:02:13] reza1615: the wiki replicas have no replag at the moment [11:03:03] which wiki do you mean? wikidata or local wiki? [11:06:23] chicocvenancio: the user moved a page on th fa.wiki it changed the lang link autamicaly on the wikidata. it should be effect database because lang link is changed [11:06:58] reza1615: you're querying a enwiki table, I'm unsure that it has the data you want there [11:07:27] reza1615: replication lag is when the production database has been updated but the replicas have not. we have a ‘heartbeat’ system to update a table to see if there are any replication lags, right now it is negative [11:07:38] chicocvenancio: wikidata changes should be effect all local wikis [11:08:20] either the production database have never been updated or the replication is de-synchronized [11:09:15] zhuyifei1999_: so what should we do for this problom? [11:09:32] I purged the page at en.wiki also [11:09:40] but it doesn't effect [11:09:59] is it possible for you to highlight the difference? [11:10:18] https://phabricator.wikimedia.org/T190667 [11:10:27] at this bug see the image [11:10:29] It’s very hard for me to read the difference in a foreign language [11:10:44] at https://www.wikidata.org/w/index.php?title=Q8278299&type=revision&diff=640988917&oldid=639242530 [11:11:23] the database show the left link but it should show the right one [11:11:57] I see. the last part should be deleted [11:12:24] (03PS1) 10Giuseppe Lavagetto: Add fake secrets for etcd v3 [labs/private] - 10https://gerrit.wikimedia.org/r/421865 [11:12:34] zhuyifei1999_: last part? [11:12:41] (03CR) 10Giuseppe Lavagetto: [V: 032 C: 032] Add fake secrets for etcd v3 [labs/private] - 10https://gerrit.wikimedia.org/r/421865 (owner: 10Giuseppe Lavagetto) [11:13:05] I see no page with that title on enwiki https://en.wikipedia.org/wiki/Australian_suffragists [11:13:26] what do you call them? word? [11:13:28] chicocvenancio: [11:13:29] https://en.wikipedia.org/wiki/Category:Australian_suffragists [11:13:50] zhuyifei1999_: the link not word [11:13:58] رده:کنشگران حقوق رأی زنان اهل استرالیا [11:14:06] is the old link [11:14:10] it should be [11:14:16] رده:سافرجت‌های اهل استرالیا [11:14:40] at wikidata and local wikis it you use inerwiki link [11:14:43] it shows [11:14:44] رده:سافرجت‌های اهل استرالیا [11:14:54] but at the query it shows [11:14:59] رده:کنشگران حقوق رأی زنان اهل استرالیا [11:15:02] the old one [11:15:55] zhuyifei1999_: chicocvenancio : see https://phab.wmfusercontent.org/file/data/7cwdttnpol6yqlimtfhk/PHID-FILE-zf2kyyxkwu6rn3ard5xr/None_-_Quarry_-_Google_Chrome.jpg [11:17:16] * zhuyifei1999_ ‘s brain hurts, but I think I get you [11:17:36] :)) [11:21:15] querying the replica directly produce the same results [11:22:45] I guess it;s best to ask a DBA [11:23:15] * chicocvenancio is fighting quarry on mobile [11:26:26] zhuyifei1999_, reza1615 the problem, if any, is on production [11:26:36] I can see the same result on all production hosts [11:26:45] so it is not a replication lag problem [11:28:39] so it's a wikidata issue ;) [11:29:22] is this really the way to query interwikis now? zhuyifei1999_ [11:29:37] idk [11:29:53] I don't know, that is why I can say it is not a labs issue, but cannot say where, if any, there is a problem [11:29:59] I never did it that way [11:30:35] only parsing wikitext and with API, the former doesn't do wikidata [11:38:43] http://tinyurl.com/ycmmyxdh [11:39:00] the wikidata sparql api is probably the right call for these queries reza1615 [11:44:01] I think that is the correct result [11:44:14] "رده:سافرجت‌های_اهل_استرالیا" [12:47:38] Hello channel, I am an aspirant gsoc 2018 candidate and looking forward to work on Improving the toolforge webservice. [12:48:21] welcome djff [12:48:52] might be a few hours until the rest of the team shows up here [12:49:26] Thanks @chicocvenancio. I wish to have some guidance on how to test the webservice application so as to go through the issues outlined in this Task. https://phabricator.wikimedia.org/T175768 [12:50:53] Awesome. I am very patient. :). Meanwhile I will keep doing some research. Thanks. [12:51:48] djff: i think it is best to wait for normal waking hours for US portion of the team [12:52:26] this 'webservice' code is very tightly integrated with toolforge environment that it's very hard to test outside [12:53:42] zhuyifei1999_: yep, that is noted in task, iirc [12:53:49] maybe a replicated environment like toolsbeta can help [12:54:17] btw zhuyifei1999_, isn't it sleeping hours for you as well? [12:54:33] * zhuyifei1999_ simply failed to sleep :( [12:54:40] but yes [12:55:09] @zhuyifei1999_, Thanks. I will explore the toolsbeta. [12:55:11] too many irl stuffs to think about [12:55:27] i don't think toolsbeta is ready atm, but I'm sure they have something in. in mind [12:56:17] @chicocvenancio, Sorry, I really did not take note of the time. I will wait for the US working time then. [13:00:01] djff: no problem, I'm just noting why it'll take a while for more relevant responses. if I could help you now I would [13:25:54] !log rcm CAC: Shutting down the server. Plan is to delete it within the next days [13:25:55] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Rcm/SAL [14:39:38] hmm. i think that hikebike server is struggling again.. Seems very unresponsive [14:39:41] http://b.tiles.wmflabs.org/hikebike/14/8465/5369.png [14:40:01] well slow rather. [14:41:05] thedj: the problem was more of it affecting all of cloud vps [14:48:17] fwiw: https://graphite-labs.wikimedia.org/render/?width=586&height=308&_salt=1522075474.961&target=maps.maps-tiles3.loadavg.05&target=maps.maps-tiles3.cpu.total.iowait [15:57:26] I had to change ssh keys, and don't understand why my new keys aren't letting me into the "ores" project instances. [15:57:48] Puppet runs are healthy, and I added the key on wikitech last Thursday. [16:11:05] awight: fwiw, labs ldap reports you have 3 public keys. adamw@sting, adamw@rust and a final one without a command that looks potentiall invalid (no ssh-rsa prefix) [16:14:13] awight: can you ssh into the cloud vps bastion with the key? [16:15:02] In theory ssh key changes done through wikitech (or toolsadmin) are instant [16:15:19] s/command/comment/ [16:20:15] Hello bd808: I am a gsoc aspirant and wish to work on Improving the toolforge webservice command. I wish to have more information on how I can setup a testing environment for the application. Thanks. [16:21:31] * chicocvenancio was going to poke other team members about djff's earlier comments right about now [16:24:01] bd808: Fails: ssh awight@primary.bastion.wmflabs.org [16:24:19] ebernhardson: oh that's whack, thanks. I'm using DESKTOP-10ATT, it seems. [16:26:42] awight: do you still need assistance? [16:29:53] djff: hello. :) My short answer is that we do not currently have a plan on how to build a development/testing environment for changes to the webservice command. It needs an environment that includes a Grid Engine cluster and also a Kubernetes cluster. [16:30:25] In the past I think all of this work has been done "live" on the Toolforge servers by a very, very small number of people [16:30:32] (like 2?) [16:38:42] bd808: Interesting. So in recap, right now, the only way to test the webservice command is live, right? [16:40:08] djff: fundamentally, yes. I think it *should* be possible to install a testing version of the scripts rather than editing the live scripts that everyone else is using for most of the proposed tasks. I do not however know today exactly how to do that. [16:41:36] Another thing that we may be able to do is setup a testing project (toolsbeta or something similar). It will take some work. [16:45:00] Okay. zhuyfei1999_ proposed toolsbeta which I started looking into (quite some work). However, I will further explore the two cases proposed and see which is most feasible. Thanks. [16:46:40] (03CR) 10Legoktm: [V: 032 C: 032] Archive the project [labs/tools/WMT] - 10https://gerrit.wikimedia.org/r/421719 (https://phabricator.wikimedia.org/T190626) (owner: 10Revi) [17:51:32] !help I’m trying to create a new tool on ,https://toolsadmin.wikimedia.org/tools/create/, but the form tells me that the tool name “wikidata-massmessage” “is already in use or invalid” [17:51:32] Lucas_WMDE: If you don't get a response in 15-30 minutes, please create a phabricator task -- https://phabricator.wikimedia.org/maniphest/task/edit/form/1/?projects=wmcs-team [17:51:57] it seems to block any tool name that contains “wikidata”, including leetspeak variations like “w1k1d4t4” [17:52:14] is that some new policy on tool names that I’m not aware of? because I can see some existing tools with such names… [17:53:15] Lucas_WMDE: I don't think that is a new policy, but I'll check some thing [17:55:46] Lucas_WMDE: could you create a task for this? [17:57:47] ok, will do [18:03:51] chicocvenancio: https://phabricator.wikimedia.org/T190707 [18:40:14] ebernhardson: I think you were right about the malformed key. Cleaned up the line breaks and I'm able to log in now--thanks! [20:08:29] bd808: https://tools.wmflabs.org/csp-report/ looks awesome! is there a way to filter by tool owner? [20:08:49] legoktm: hmmm... not yet, no. [20:09:20] I need to add some help pages to describe the data we have and why we are collecting it [20:09:45] ok, https://lists.wikimedia.org/pipermail/analytics/2018-March/006260.html seems like a false positibve [20:11:10] legoktm: hmmm... yeh. My first guess is mixed http/https, but honestly some CSP failures are inscrutable. [20:11:40] oh... does "*.wikimedia.org" not match "wikimedia.org"? Maybe that's it [20:12:01] I know why the meta header would not work [20:25:35] bd808: also, is it safe to whitelist *.wikimedia.org given that it hosts external sites? [20:26:12] "safe" is a relative term. I didn't want 50 domain names in the list. ;) [20:26:46] We can always add more specific rules after we take care of the worst violations (or decide that this is all dumb). [20:27:11] makes sense [20:27:48] map tiles servers seem to be the top external thing right now [20:35:38] https://tools.wmflabs.org/csp-report/search?ft=admin&fs=fonts.gstatic.com even the admin tool? :p [20:36:17] I thought there's a bug [20:36:30] hmm yeah [20:36:34] https://tools.wmflabs.org/csp-report/search?ft=admin none of that looks reasonable [20:36:44] I don't see google fonts being references anywhere in admin tool [20:36:51] *referenced [20:37:50] probably browser plugins/addons [20:39:23] badly coded ones [20:39:32] I think Chrome has a "your font is too slow take this one" bug feature [20:39:51] good ones should not report CSP randomly [20:49:31] CSP reports are totally random noise as far as I can tell [20:50:23] I think all the ones attributed to the admin tool are false positives from browser local things. [20:51:16] they get counted against the admin tool due to a bit I put in that is basically "if you can't find a tool name in the origin URI, then mark it against the admin tool" [20:51:53] I added some report filtering logic late yesterday that should get rid of most of the false positives, but maybe not all. [21:12:12] Hey, https://tools.wmflabs.org/ores-support-checklist/ says there is no webservice but uswgi.log (flask app) says all works are spawned and everything is up [21:12:41] I'm following https://wikitech.wikimedia.org/wiki/Help:Toolforge/My_first_Flask_OAuth_tool [21:13:17] uwsgi.log doesn't have anything suspicious and uwsgi.err doesn't even exist [21:13:35] oh it's up now [21:13:37] sorry [21:13:39] nvm [21:17:04] Amir1: it can take a bit for the proxy and the kubernetes service to sync up [21:17:19] yeah [21:17:23] thanks [21:17:36] Its usually pretty fast once you see logs, but I've had it take up to about 5 minutes [21:34:58] !log tools clush -w @exec -w @webgrid -b 'sudo find /tmp -type f -atime +1 -delete' [21:35:01] Logged the message at https://wikitech.wikimedia.org/wiki/Nova_Resource:Tools/SAL [21:35:09] * bd808 is a human cron job