Hi, I'd like to be added to the WMF-NDA group. The security issues I'm interested in helping solve are related to Vuln-XSS, especially fixing such issues (such as T353316/T340221) in a way that doesn't involve using wgRamHtmlMessages (which complicates things for translators over in Translatewiki). In addition to the first task I mentioned, I have already been involved in fixing such issues in T204470 and T154891/T204470.
Adding a few WMF employees who will probably support my request in CC.
| Status | Subtype | Assigned | Task | ||
|---|---|---|---|---|---|
| Resolved | sbassett | T353393 Request to add jhsoby to WMF-NDA group | |||
| Resolved | Mstyles | T354607 Security Issue Access Request for jhsoby |
Following https://wikitech.wikimedia.org/wiki/Volunteer_NDA I added you to WMF-NDA-Requests so you should be able to sign L2
Note that the WMF-NDA group does not actually grant view access to security issues, the group for that is acl*security which is managed via https://www.mediawiki.org/wiki/Security/SOP/Access_to_Phabricator_Security_Issues.
Yes, that's the one I'm trying to follow; the second step in that process is to seemingly do this different but mostly overlapping process in wikitech:Volunteer NDA, so I guess I'm doing both? 😅