[00:02] <wxl> mhall119: same here :(
[00:04] <wxl> mhall119: the thing that's really sad about it is the changes i usually need to make are fairly trivial. not the kind of thing i should have to spend 10 minutes logging in on :/
[00:10] <pleia2> at least we can still edit it, the help.ubuntu.com/community is entirely locked down to edits until we can figure out some way to handle the spam
[00:10]  * pleia2 needs to chase down some loose ends there
[00:11] <wxl> yikes wow i didn't know that
[00:11] <wxl> i assume there's an rt ticket?
[00:11] <pleia2> wxl: there was an rt ticket to shut down the spam, which lead to a full lockdown (except admins)
[00:11] <pleia2> IS suggested we create a group of trusted editors, and only they can edit it
[00:12] <pleia2> but the idea of maintaining such a list makes my stomach ache, and I don't yet know what else they can offer us
[00:12] <pleia2> (plus such a list defeats half the point of a wiki)
[00:19] <wxl> pleia2: i guess i've never had an edit at it. what wiki software did it use?
[00:20] <pleia2> wxl: same as wiki.ubuntu.com, moinmoin
[00:20] <wxl> pleia2: then how the heck did it have a problem with spam and the wiki doesn't?
[00:22] <pleia2> wxl: if you look at 2016-01-06 under https://wiki.ubuntu.com/RecentChanges?max_days=14 the wiki.ubuntu.com one DID get a little bit of an attack, but it's nothing like the thousands of pages created on the help wiki over the holidays
[00:22] <pleia2> as far as I can tell with the help wiki, wrong place, wrong time? :)
[00:22] <pleia2> this is all a recent development
[00:23] <wxl> madness.
[00:23] <wxl> did the spam involve registering a lp account, too????
[00:23] <pleia2> the worst part is that actual people have trouble logging in, but not bots ;)
[00:23] <pleia2> yep
[00:23] <wxl> ridiculous amount of work for probably very little return
[00:24] <wxl> we should require 2fa by default on sso logins
[00:24] <pleia2> probably assumed it wasn't being watched
[00:24] <wxl> i've been using 2fa for quite a while and been pleased
[00:25] <pleia2> other projects beyond ubuntu use the SSO, since it used to be *launchpad* SSO, not ubuntu-branded and some projects unrelated to ubuntu hosted stuff there (perhaps most notably, openstack)
[00:25] <pleia2> so requiring 2fa doesn't just impact us
[00:26] <wxl> hm
[00:27] <wxl> well maybe we could require 2fa set-up for all users, make it a requirement to complete authentication on the wiki, and leave it as a user-selectable option for other sites
[00:29] <pleia2> yeah, I'll have to collect these ideas somewhere so I can have a fruitful discussion with IS
[00:30] <wxl> well you can always put it in the ticket
[00:30] <pleia2> yeah, could do
[00:30] <wxl> but if canonical hosting for our loco is any judge, most things on rt get kind of ignored XD
[00:30] <wxl> probably better to approach the right person or persons if you know where to find them
[00:30] <pleia2> I usually submit the ticket and follow up in channel, but lately all my requests have been going through quickly
[00:31] <pleia2> no need for follow up!
[00:31] <wxl> wow i wish that would happen for me
[00:31] <wxl> we've been waiting for the aforementioned hosting for almost a year
[00:31] <pleia2> this is obviously a more complicated situation though, so it probably gets pushed to the "this is hard, do later" pile
[00:31] <wxl> and honestly i don't think our request is very hard
[00:31] <pleia2> yikes, the ticket is still active?
[00:31] <wxl> though i guess it does require a wordpress install (read: security hole)
[00:31] <wxl> yep
[00:31] <wxl> let me dig it up
[00:31] <pleia2> that sounds like an oversight
[00:32] <wxl> i've talked to people about it before including IS folks
[00:32] <pleia2> crazy :(
[00:32] <wxl> also before i was on LC, jose was really helpful with trying to push it through
[00:32] <pleia2> xubuntu.org runs on wordpress hosted by canonical, no big deal
[00:32] <pleia2> anyway, I have a meeting to run to
[00:32] <pleia2> have a good evening :)
[00:32] <wxl> pleia2: i was talking about wordpress in a way that i think only a sysadmin would understand XD
[00:32] <wxl> k bai
[00:33] <wxl> USING wordpress is easy
[00:33] <wxl> SECURING wordpress is a whoooole different beast
[00:36] <wxl> pleia2: should you have some interest in the subject, this is the ticket regarding our loco's hosted site https://rt.ubuntu.com/Ticket/Display.html?id=25072 and actually it's been more than a year! that makes our ticket one of the NEWEST ones in the loco queue. oldest was open 8 years ago. so i'll just be patient :O
[07:33] <dholbach> good morning
[07:36] <popey> Morning dholbach :)
[07:36] <dholbach> hey popey
[07:37] <popey> I am not going to be around for at least the first half of the Q&A this afternoon unfortunately. Need to pick kids up from school today.
[07:38] <dholbach> popey: who did last week's?
[07:38] <popey> dunno, not me.
[07:38] <popey> hence raising it because it's my turn
[07:39] <popey> mhall119 did with davidcalle
[07:39] <dholbach> ok
[07:39] <dholbach> I'll ping Nick and dpm later on
[07:39] <popey> kk, off to drop the kids off at school now.. brb
[07:40] <dholbach> see you!
[08:31]  * popey returns
[08:33] <dholbach> balloons, dpm: it looks like it's us for the Q&A later on
[08:34] <dpm> sounds good
[08:45] <davidcalle> Morning o/
[08:58] <popey> pip pip
[10:41] <dholbach> balloons, davidcalle, dpm, mhall119, popey: we should probably get another biweekly update out by the end of the week
[10:42] <dpm> good point
[10:52] <jose> dpm: ping
[10:59] <dpm> hola jose
[10:59] <jose> dpm: todo bien?
[11:00] <dpm> todo bien, a punto para ubucon summit? :)
[11:06] <jose> yep! queria preguntarte si necesitaban una mano con algo
[11:09] <dpm> jose, gracias :) sí, te envío una lista por correo, estaba a punto de crearla
[11:09] <jose> genial
[11:10] <davidcalle> statusupdate-bot: !update
[11:10] <statusupdate-bot> * Fixing stuff
[11:10] <statusupdate-bot> * Fixing more stuff
[11:10] <statusupdate-bot> * Beer!
[11:10] <jose> lol
[11:11] <davidcalle> dholbach, dpm: here is our biweekly update ^ :p
[11:11] <dholbach> haha
[11:11] <dpm> the last one is a wishlist item, isn't it?
[11:12] <davidcalle> dpm, nope, there is a dedicated meeting
[11:32] <dpm> jose, primer mail enviado :)
[11:37] <jose> woot woot
[11:40] <nigelb> wait, what.
[11:40] <nigelb> popey: that was weird.
[11:40] <nigelb> You just approved someone onto the etherpad team and they just deactivated themselves.
[11:40] <popey> also, i mistakenly added them to another team and immediately revoked them
[11:41]  * nigelb hands popey a jug of warm tea
[11:41] <nigelb> Er, *kettle*
[11:41] <nigelb> No wait, it's a pot of tea.
[11:42] <popey> yeah, dunno what they're up to
[12:03] <dpm> jose, ok, segundo y ultimo mail enviado
[12:17] <jose> dpm: respondo ni bien regrese, tengo que correr para algunas cosas
[12:18] <dpm> jose, genial, gracias!
[14:06] <dholbach> balloons, dpm: so it'll be the 3 of us?
[14:06] <dholbach> (for the Q&A?)
[14:06] <dpm> dholbach, I'm up for it
[14:06] <dholbach> yep, me too :)
[14:06] <dpm> cool
[14:07] <dpm> dholbach, do you mind starting with the announcements?
[14:07] <dholbach> can do
[14:07] <dpm> great, thanks
[14:14] <balloons> sounds fun!
[14:15] <dholbach> balloons: does that mean you're part of it or not? :)
[14:15] <dholbach> if yes, I'd include you in the announcement
[14:15] <balloons> dholbach, if you'll have me, of course ;-)
[14:15] <dholbach> ok cool :)
[14:45] <dholbach> ok done
[15:32] <dpm> mhall119, call?
[15:43] <popey> School run.. biab
[15:51] <balloons> we ready dholbach?
[15:51] <dholbach> balloons: yep
[15:55] <dholbach> balloons: you're just on Freenode it seems
[15:55] <balloons> blargh
[15:56] <balloons> my bouncer likes to dc without saying
[17:02] <dholbach> all right my friends - I call it a day - see you all tomorrow! :-)
[23:13] <pleia2> wxl: btw, I am a sysadmin for my Actual Job, so I do know a fair amount about how to secure websites, and I wasn't speaking just as a user of wordpress ;)
[23:13] <wxl> pleia2: i know. that's why i said that XD
[23:13] <pleia2> wxl: in xubuntu we have to get all our plugin and theme patches cleared by IS when we submit them, but the turnaround is pretty quick these days
[23:13] <pleia2> so they do spend time in security review, but not long for us
[23:13] <wxl> well that's good
[23:14]  * pleia2 nods
[23:14] <pleia2> as to the queue for loco teams, I don't know what's up with that, and probably something the LC should look into
[23:14] <pleia2> if Canonical can't reasonably serve LoCos in *less than a year* then it's probably worth cutting the cord and admitting it's not something they realistically offer
[23:15] <pleia2> that at least would reduce the expectation, and give them leave to find alternate hosting
[23:16] <wxl> true true
[23:16] <wxl> so who should we approach about that?
[23:16] <pleia2> someone on the community team here
[23:16] <knome> what are we talking about?
[23:16] <pleia2> knome: web hosting for locos, wxl submitted a ticket for a wordpress blog a year ago, still not done
[23:16] <knome> right
[23:16] <pleia2> knome: and it's apparently the youngest in the loco queue
[23:16] <pleia2> so /o\
[23:16] <wxl> pleia2: and mine is one of the newest in the IS loco queue
[23:17] <wxl> yeah
[23:17] <wxl> that
[23:17] <knome> mhm
[23:17] <wxl> knome: so someone on the council shoudl talk to canonical and see if it's reasonable to still say we CAN handle supporting the locos
[23:17] <wxl> at least in terms of IS
[23:17] <knome> i don't know if it could help, but i have recently pushed this community theme to github: https://github.com/knomepasi/ubuntu-community-wordpress-theme
[23:18] <knome> so maybe they would have easier time with the requests if people just used a few centralized themes and didn't ask this and that
[23:18] <wxl> well that's certainly a problem
[23:18] <pleia2> the california loco (private hosting) uses some version of the unified theme
[23:18] <knome> unified theme?
[23:18] <pleia2> from like 100 years ago
[23:18] <knome> this is from like this year :)
[23:18] <pleia2> there was some community theme
[23:18] <knome> yeah, old as mammoths
[23:19] <pleia2> yeah
[23:19] <knome> https://raw.githubusercontent.com/knomepasi/ubuntu-community-wordpress-theme/master/screenshot.png
[23:19] <wxl> well i'll try to remember to send out an email to the cc and we'll go from there
[23:19] <pleia2> but our site is essentially a splash page, so even wordpress is overkill ;)
[23:19] <pleia2> "we'll install wordpress and add stuff to it later"
[23:19] <pleia2> mhmm
[23:19] <knome> actually, i am on this channel because i've been meaning to ask about people testing that new theme
[23:20] <knome> so wxl, if you haven't decided on a theme and want to give that a run...
[23:20] <pleia2> knome: maybe an email to the mailing list too?
[23:20] <knome> pleia2, on the todo
[23:20] <pleia2> cool
[23:21] <knome> with this theme, you can even change the logo from the wp admin, so no need for anybody to ask for another theme upload separately
[23:21] <wxl> knome: i'd email the loco-contacts list, too
[23:21] <knome> wxl, once we have ironed out the biggest bumps, yeah
[23:23] <knome> what i'd like to know now if there is something that is obviously wrong so i can fix it before people have been spreading the non-production-ready theme all over the internet
[23:23] <knome> at which point it is almost as useful as the age-old community theme
[23:24] <knome> i also wouldn't mind if this theme inspired others to contribute to it
[23:26] <knome> it's also on my todo to talk with balloons to probably get the google code-in participants try this theme out as well
[23:26] <knome> and since you can change colors and stuff from the admin too, it might be a good fit for both ubuntu gnome and ubuntu studio who are seeking for a new wordpress theme
[23:28] <knome> wxl, so instead of asking me to email everybody, would you like to take some time yourself to see if the theme works for you?
[23:28] <wxl> knome: well, once my ticket gets taken care of, perhaps in a few years, sure.
[23:28] <knome> LE sigh
[23:29] <knome> i'll ask somebody else then.
[23:29] <knome> thanks for the support!
[23:29] <pleia2> wxl is a busy person ;)
[23:29] <knome> an i'm not?
[23:29] <wxl> it's not that i'm busy
[23:29] <pleia2> not everyone can help
[23:29] <wxl> i just have nothing to test it on
[23:29] <knome> fortunately, i'm not the one who needs the wordpress theme
[23:30] <wxl> ok here's how we'll do it
[23:30] <wxl> you fly to canonical
[23:30] <wxl> rough up the head of IS a bit
[23:30] <wxl> then my ticket gets approved
[23:30] <wxl> then i try your theme
[23:30] <wxl> easy!
[23:30] <pleia2> wxl: if you want to test it, you could just use virtualbox or something
[23:30] <wxl> yeah i guess i could
[23:31] <wxl> but ANYONE can do that :)
[23:31] <knome> well, if you had read what i said, you'd know i wanted to fix things before it's uploaded on the IS servers so i didn't need to request for updates
[23:31] <pleia2> yes, but so far no one is helping knome test it
[23:31] <pleia2> so he needs folks to test in non-production environments
[23:31] <knome> it's fine, i'll ask somebody else
[23:31] <pleia2> preferably *not* on the internet, so in VMs
[23:31] <knome> i am running it in a staging server on the internet as well
[23:32] <wxl> i could probably juju my way to a wordpress theme huh? :)
[23:32] <knome> i think you are overthinking it
[23:32] <knome> just set up wordpress anywhere with a web server and push the theme there
[23:32] <knome> you can probably juju the web server, but not the theme really
[23:33] <knome> but it's in git, so you only need to git pull
[23:33] <wxl> so i'll let you know when i get a vm set up
[23:33] <knome> sure, thanks
[23:34] <wxl> admittedly this in between work but
[23:35] <knome> there's no rush
[23:35] <knome> you don't need to do it today