[02:51:08] Anyone here able to help with the CTX tool? Got a user with a translation apparently stuck. They're trying to translate en-->fr [06:01:01] [[Tech]]; MisterSynergy; /* 2FA for all? */ new section; https://meta.wikimedia.org/w/index.php?diff=16686293&oldid=16681812&rcid=9588321 [06:47:24] "Wikimedia error" on en.wiktionary.org and en.m.wiktionary.org: [06:47:27] Request from 151.75.94.208 via cp3030 cp3030, Varnish XID 868810812 Error: 503, Backend fetch failed at Thu, 04 May 2017 06:46:56 GMT [06:47:47] "Our servers are currently under maintenance or experiencing a technical problem. See the error message at the bottom of this page for more information." [06:48:35] 30 min ago it worked. [06:53:07] Request from 82.22.9.39 via cp3032 cp3032, Varnish XID 299859986 [06:53:08] Error: 503, Backend fetch failed at Thu, 04 May 2017 06:52:54 GMT [07:11:51] https://www.irccloud.com/pastebin/R3DXze4F/ [07:11:53] are you still seeing those errors right now? [07:11:58] yes [07:12:01] does retry work? [07:12:05] no [07:12:47] sometimes the page loads, sometimes only the html loads, and the page looks misformed [07:13:33] ok [07:13:47] thank you for the reports, keep letting us know [07:13:52] In Wikidata some Properties can not be filled [07:13:55] https://usercontent.irccloud-cdn.com/file/yIfY8C2r/ [07:14:04] Others work fine [07:14:05] these will all be related [07:14:14] I guess so [07:15:43] It really just depends on which page you're loading [07:15:51] Some load fine, others don't [07:17:53] mm hmm [07:19:02] https://usercontent.irccloud-cdn.com/file/bJeEeCZN/ [07:19:10] Eksample of a page loading [07:19:32] (I use Vector style normaly) [07:20:01] yep this is failure of some things to load [07:20:09] Script seems to be working fine [07:20:29] Need more eksamples? [07:21:01] no, just if you would be willing to check again in a few minutes [07:21:14] and thanks for being around to report this [07:21:27] Sure [07:21:31] I'll saty here [07:21:35] stay* [07:23:27] <_joe_> apergos: it should be ok now [07:23:43] Rodejong: want to check again a few pages? [07:23:45] Okay. I'll try [07:24:49] Yeah, as far as I can see it works again. Also the Wikidata Items can be filled in agai [07:24:53] again* [07:26:40] Yep, Found no errors after retrying all the pages I had problems with [07:27:52] that's great, thanks so much [07:28:10] You're welcome [09:33:06] Hello everyone, is https://www.mediawiki.org/api/rest_v1/ serves by a reverse proxy? [09:33:44] I just noticed it may fail on some subpages. [09:33:49] Like https://www.mediawiki.org/api/rest_v1/page/html/Content_translation/cxserver/Setup [09:52:17] hello; current revisions of all pages should be available [09:55:02] https://www.mediawiki.org/api/rest_v1/page/html/Content_translation%2Fcxserver [09:55:21] https://www.mediawiki.org/api/rest_v1/page/html/Content_translation%2Fcxserver%2FSetup [09:55:29] these seem to work fine, KenOokamiHoro [09:56:43] apergos: so it means "/" should be escaped ? [09:56:51] yep [09:57:43] apergos: ok ,thanks a lot 😄 [09:57:50] yw! [13:27:58] Hey guys, not sure if this is the correct place for this but wikipedia has blocked one of the servers www.taringa.net uses to get open graph data. Is there anyone here I can talk to revert this decision ? [13:29:46] juandie_: what exactly do you mean by "blocked"? can you copy-paste an error message or something? [13:31:13] curl to en.wikipedia.com gives a timeout [13:32:13] has it always done this juandie_ [13:32:41] nop, it started a couple of ours ago [13:33:05] MatmaRex: possible codfw --> eqiad? [13:33:23] we use wikipedia to monitor our opengraph extract system [13:33:43] it's en.wikipedia.org [13:34:03] juandie_: we almost certainly did not block you, unless you generated like gigabytes of traffic [13:34:15] MatmaRex: true that, I'm trying .org [13:34:44] matanya: en.wikipedia.org redirects to en.wikipedia.org [13:34:54] sorry MatmaRex [13:36:31] MatmaRex: ok, will investigate [13:37:03] MatmaRex: I mean .com redirects to .org [13:38:03] Ok, forget I say anything it looks like a ipv6 problem on our side. [18:08:44] Anyone responsible here for two-factor authentication at Wikimedia? [18:10:06] probably [18:10:52] I am interested to hear when it is going to become available for all users, not just sysops and other vips... [18:11:45] After this hacking incident last November it was rapidly deployed for some important users, and WMF said that is should become available for all users asap [18:12:49] but nothing happened since, and all relevant meta-wiki pages and phabricator tasks indicate that there is no progress at all in this field [18:13:32] MisterSynergy: as far as i know, the main obstacle is inventing some sensible system of account recovery if you lose your 2FA and backup codes. even with the limited number of users, we regularly get requests to recover accounts, which either have to be declined as impossible, or take up a lot of somebody's time to verify the requester's identity [18:14:05] I'd imagine there'd also be an issue with this in some other countries where a second device isn't readily available, no? (just a thought) [18:14:37] how do other web services deal with this problem? 2FA isn't really exotic any longer, so there should be some established procedures available... [18:15:03] Chrissymad: you can always use your first device (whatever you're accessing Wikimedia wikis on, e.g. your computer) as the "second device". it's still a lot better than nothing. [18:15:32] Chrissymad: I do not request obligatory 2FA for all; it should just be an option for all [18:15:46] MisterSynergy: they have a customer service department ;) [18:15:50] MatmaRex: i suppose i didn't realize that haha [18:15:55] i always thought i just had to use my phone app [18:16:06] though i haven't figured out huggle and 2fa [18:16:41] Chrissymad: any application using TOTP can be used. you can find one for any operating system, or even old dumbphones. :) [18:17:08] it's mostly user error in my case [18:17:14] :P [18:17:52] MisterSynergy: i think Google's recovery relies on them having your phone number, which is a major thing - we probably don't *want* to have anyone's phone numbers, and even if we did that, making this recovery system work worldwide would be either a major undertaking, or having to pay some service a major sum to handle this for us [18:18:29] MatmaRex: would 2fa have any impact on ACC? [18:18:30] what about email? [18:18:53] if you use email, you kind of bypass the second factor, no? [18:18:58] Chrissymad: what's ACC? [18:19:34] (someone hacks your email, and they can "recover" your Wikipedia account without having your phone or other second factor device) [18:20:51] can't they do that anyway if my email account is compromised? [18:21:02] no, that's the point of 2FA [18:21:16] they have to both compromise your password (or equivalently, email) and your second factor device [18:21:29] MatmaRex: https://en.wikipedia.org/wiki/Wikipedia:Request_an_account/Guide [18:21:38] I see, thnx [18:21:39] Yeah, it's supposed to be rolled out everywhere. But there's the issues above, and there's also some usability type issues too that want improving [18:21:44] MisterSynergy: by the way, if you want 2FA for yourself, you could ask to be added to the "Two-factor authentication testers" global group on Meta [18:22:01] i don't know if there's a process, but you can probably just ask and be added [18:22:19] i'm curious how it would change acc [18:23:03] Chrissymad: it shouldn't affect it. the person requesting an account could add their second factor later, after they got and changed their password. [18:23:39] i'm not super savvy with this but if 2fa were available to all users do you think they'd require an email to be associated as well? [18:23:50] Yeah, there's no plans in any of the near future to make it compulsory for all [18:23:51] not that you can do anything at acc with an account that has no email anyway [18:23:56] There's vague ideas to make it compulsory for certain groups though [18:23:59] Reedy: no but i mean [18:24:03] if someone doesn't register an email [18:24:07] and has 2fa enabled [18:24:11] they're kinda doubly screwed [18:24:22] Mmm [18:24:27] if that makes sense? [18:24:39] but i guess really it doesn't matter because if you have no email you have no ability to recover your account [18:24:43] Probably worth adding a task to make the extension check for email address/email confirmed, and suggest doing it first [18:26:04] how bout a wiki-fingerprint reader for those of us who are lazy [18:26:04] :D [18:29:03] MatmaRex: I don't find this "Two-factor authentication testers" group on meta. Did you just mean the right "oathauch-tester", to be requested at the "Stewards requests" page? [18:29:15] such as this one: https://meta.wikimedia.org/wiki/Steward_requests/Global_permissions/2017-04#oathauth-tester_for_Chrissymad [18:29:23] heyoooo [18:29:26] :-) [18:29:42] i meant this: https://meta.wikimedia.org/wiki/Special:GlobalUsers/oathauth-tester [18:29:45] MisterSynergy: so yes, that [18:29:52] i wonder if they'll implement 2fa for the efm read only group whenever that becomes a thing [18:30:14] or if it becomes a thing i suppose [18:31:23] Chrissymad: just to note, fingerprint/retina/whatever scanners are a poor second factor, because you can never change it if it's somehow compromised. :) [18:31:39] oooooooh retina scanners :D [18:31:47] * Chrissymad plays the NCIS theme song [18:31:53] the movies lie. ;) [18:31:56] i know :P [18:34:27] i mean i have no idea how they actually function, just that movies and tv lies [18:36:20] Okay regarding that 2FA testers group: the stewards probably do not want to add me there, right? Where the best place to ask? [18:36:28] Developers at phabricator? [18:36:52] MisterSynergy: stewards should be fine with adding you there. i see a couple people in that group i don't recognize, i assume they're just random folks who asked. [18:36:55] MisterSynergy: i think you have to ask there? [18:37:08] i mean i don't know that theres any damage you could do having 2fa lol [18:37:17] :-) [18:37:39] i mean if *I* haven't broken anything with it, surely you won't :P [18:37:52] MisterSynergy: here's an example where someone just asked and got it: https://meta.wikimedia.org/wiki/Steward_requests/Global_permissions/2017-01#Oathauth_tester_for_Grawity :) [18:45:38] https://meta.wikimedia.org/wiki/Steward_requests/Global_permissions#add_oathauth-tester_right_for_MisterSynergy [18:45:42] let's see :-) [18:47:57] good luck! [18:51:06] also you guys know anything about the weird issue with edit summary box not showing up on new sections of user talk? [18:53:02] thnx; no, I don't [18:54:12] but same here, indeed. do you need an edit summary? it is typically autofilled anyway [18:54:36] MisterSynergy: it's not auto if you're creating a new section on a user talk page and it isn't an automated edit (ie. not twinkle etc...) [18:54:41] and you don't *need* it [18:55:00] but i like to keep my % up in case I ever decide that I want to put myself into the hunger gam...I mean RFA [18:56:19] the edit summary is at least pre-filled with something like "/* section heading */ new section" [18:56:40] also have the issue with responses sometimes [18:56:42] its weird [18:56:51] started happening after the last great-wiki outage a few weeks ago [18:57:33] I use visualeditor-wikitext meanwhile, there's still an edit summary in that situation [18:58:17] so I have just checked in another project with the old wikitext-editor what happens, and haven't noticed that "problem" until now [19:01:08] * Chrissymad never uses VE anymore [19:01:12] except sometimes for citations [19:02:18] well that visual wikitext mode isn't that bad, actually [19:02:25] some flaw, yes [19:02:35] *flaws [19:02:42] is that the new thing they did? [19:03:17] you get a VE interface, but it is the wikitext you edit [19:03:39] so basically a source editor with VE surrounding [19:03:47] i pretty much just do anti vandalism work (spi specifically) and tag garbage for deletion so i rarely find myself using the editor in articles lol [19:04:21] :-) [19:04:46] I heard that this new mode *might* replace the old editor at some point in the future [19:04:47] almost 21% of my total contribs are deleted lol [19:05:59] most of those numbers are useless anyway [19:06:11] MisterSynergy: for good reason though [19:06:24] i do *a lot* of new page patrol and spi work [19:06:29] = lots of g5s, g11, g12 [19:07:24] I understand; that's why I said that most statistical numbers regarding our contributions are useless. they need to be put into context to become somewhat meaningful [19:08:14] yet many just compare plain edit counts (and other numbers) and judge about other editors [19:08:20] oh i'm sure [19:31:49] yurik: ping [19:32:23] ? [19:32:30] pm yurik