[17:48] <mhall119> pleia2: I was reading through the email thread on https://lists.ubuntu.com/archives/ubuntu-doc/2016-January/019674.html and you said you weren't sure about the feasibility of 2-factor auth, was that because you didn't know if it could be enabled, or because you didn't know if casual editors would have a 2-factor device/app?
[17:49] <pleia2> mhall119: it's just not my call, it may be tolerable on the community side but I don't know all the stakeholders here
[17:50] <pleia2> I think it would be ok to enable 2-factor on *just* the wikis maybe, it would be a barrier but tolerable, that's not something I think IS would do for *all* SSO things though (lots of people in the world using Ubuntu's SSO)
[17:50] <pleia2> certainly would be a lot better than what we have now :)
[17:51] <mhall119> yeah, but SSO already has the ability for individual sites to request/require 2-factor on login
[17:51] <pleia2> yep, it does exist
[17:51] <pleia2> I don't use it
[17:51] <mhall119> I don't know if the moin auth stuff has that ability though
[17:51] <pleia2> I do a lot of work with openstack and it's not all awesome with 2-factor
[17:51] <pleia2> (we are moving off of Launchpad/Ubuntu SSO some day...)
[17:52] <pleia2> anyway, yeah, I don't know either re: moin
[17:52] <mhall119> not to github I hope :)
[17:52] <pleia2> no, we can't use proprietary software in our infra, we have our own openstackid project+service
[17:53] <mhall119> ah, cool
[17:53] <pleia2> and I'm pretty sure captcha was one of the ideas in the ticket
[17:53] <pleia2> we have lots of ideas, but no feedback loop from IS about what's reasonable to expect
[17:53] <mhall119> anyway, I worked on SSO and 2FA while in ISD, so if you want me to look more info the feasibility of it for the wiki I'd be happy to
[17:54] <pleia2> if IS thinks that's the path to follow, I think it would be fine
[17:54] <mhall119> ack, popey and I are continuing to poke people in IS about it
[17:54] <pleia2> just don't want anyone wasting their time if it won't pan out because $reasons
[17:54] <pleia2> like, political reasons
[18:25] <knome> mhall119, i acknowledge it's a side issue, but re: the logging in issue; no, it was not fixed "many years ago", it was not until recently that ubuntu sso accounts had a username (without having been linked with launchpad)
[18:26] <mhall119> knome: I had to deal with this in summit (and LTP I think) which I've barely touched in the last 3 years, so unless we're talking about different things, it was a while ago
[18:28] <knome> this affected logins to the wikis and the qa trackers at least, it had a recent IS ticket
[18:28] <knome> pleia2 can confirm
[18:28] <knome> or might have a handy link to the ticket or sth
[18:28] <pleia2> I think loco.ubuntu.com too, but I could never properly confirm with someone who cared enough and had never logged in
[18:28] <knome> this totally wasn't "many years ago"
[18:29] <knome> so maybe it has something to do with this issue
[18:29]  * pleia2 nods
[20:19] <mhall119> pleia2: knome: can you see ifyou can edit help.ubuntu.com/community/ now?
[20:21] <mhall119> or, rather, that the people who could edit itbefore it was locked down can edit it agian?
[21:20] <pleia2> will have to ask someone not in the https://help.ubuntu.com/community/EditorGroup (or AdminGroup)
[21:20] <pleia2> (I am)
[21:27] <pleia2> mhall119: you could try :)
[21:37] <mhall119> do I have the right set of permissions (and non-permission)?
[21:38] <pleia2> I don't know, I don't know what you're trying to get by asking me to edit a page (I already know I can)
[21:38] <pleia2> I assumed IS had made a change :)
[21:39] <pleia2> since January 4th, only people in https://help.ubuntu.com/community/EditorGroup and AdminGroup can edit
[21:39] <pleia2> that's only a few of us, so for the past month and a half the wiki has only been edited by those people, and people sending us diffs and things on the mailing list (very tedious, I don't have time for this)
[21:40] <pleia2> since both EditorGroup and AdminGroup give administrative access, we don't want to just hand this out to everyone (the team has a process in place for building up a body of work as a trusted contributor for admin powers)
[21:41] <mhall119> pleia2: I was poking IS and was told: 15:16 < neale> mhall119: known users now have read/write
[21:41] <pleia2> I don't know what "known users" are
[21:41] <mhall119> so I just wanted to have someone here check that it was all back to how it was
[21:41] <mhall119> pleia2: I'm guessing people with accounts already on the wiki
[21:42] <pleia2> I assume he means EditorGroup and AdminGroup? We got no word back on the non administrative ContributorGroup that we requested in the ticket
[21:42] <mhall119> not sure what that means for new accounts though
[21:42] <pleia2> we should probably figure out what they mean, there's been no communication in the ticket
[21:43] <mhall119> ack, I'll ask neale to update the ticket
[21:43] <pleia2> thanks
[21:44] <mhall119> hmmm, they all show as ImmutablePage to me
[21:45] <pleia2> so you're not a "known user", whatever that means :)
[21:49] <mhall119> it means IS is pretending they don't know me :)
[21:51] <mhall119> pleia2: In theory, a new user should be able to edit https://help.ubuntu.com/community/Lubuntu/Documentation right?
[21:53] <pleia2> mhall119: not since the lockdown
[21:53] <pleia2> mhall119: but in a properly functioning wiki, like we want back, yes
[21:54] <pleia2> just like wiki.ubuntu.com
[22:00] <pleia2> mhall119: update from neale just now indicates you (normal people) should be able to edit pages now
[22:00] <pleia2> it's heavily cached, so may need to do a hard refresh when logging in to see things Edit-able
[22:00] <mhall119> pleia2: yeah, something was wonky for a bit, but I can edit pages now
[22:01] <pleia2> if it continues to be Immutable, welcome to our world, it's a nightmare
[22:01] <pleia2> \o/
[22:01] <pleia2> this gets us to our second topic, moinmoin sucks and is slow and is wonky :)
[22:01] <mhall119> keep an eye out for more spam, but hopefully they've all moved on by now
[22:01]  * pleia2 nods
[22:01] <mhall119> yes,but moinmoin is editable again, baby steps :)
[22:01] <pleia2> \o/
[22:02] <pleia2> not sure I want to do a splashy announcement on ubuntu-doc in case spammers are watching :\
[22:02] <pleia2> maybe people will just start to notice they can edit again
[22:02] <mhall119> yeah, I was thinking that same thing, let the folks who regularly edit know it's back
[22:03] <mhall119> but otherwise not advertise it too much
[23:33] <pmatulis> wiki.ubuntu.com was attacked just a few days ago. it will probabl happen again to the help wiki