Marc-Andre, I have no objection to a news item, but I think the wiki being down is important enough that it should also stay at the top of the page, webmaster is getting constant pings about it. Is there some reason you removed it from the top? Thanks, Aahz ----- Forwarded message from "marc-andre.lemburg" <pydotorg-checkins@python.org> -----
Date: Wed, 16 Jan 2013 16:32:04 +0100 (CET) From: "marc-andre.lemburg" <pydotorg-checkins@python.org> To: pydotorg-checkins@python.org Subject: [Pydotorg-checkins] r14559 - trunk/beta.python.org/build/data Reply-To: pydotorg@python.org
Author: marc-andre.lemburg Date: Wed Jan 16 16:32:04 2013 New Revision: 14559
Modified: trunk/beta.python.org/build/data/content.ht trunk/beta.python.org/build/data/newsindex.yml Log: Turn the wiki down notice into a news item.
Modified: trunk/beta.python.org/build/data/content.ht ============================================================================== --- trunk/beta.python.org/build/data/content.ht (original) +++ trunk/beta.python.org/build/data/content.ht Wed Jan 16 16:32:04 2013 @@ -62,9 +62,6 @@ PyKyra http://www.alobbs.com/pykyra 3D Rendering http://www.vrplumber.com/py3d.py
-Note: the Python wiki is currently down as of 2013-01-05 -(`<http://wiki.python.org/moin/>`__), we will post more details later. - **Python is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance
Modified: trunk/beta.python.org/build/data/newsindex.yml ============================================================================== --- trunk/beta.python.org/build/data/newsindex.yml (original) +++ trunk/beta.python.org/build/data/newsindex.yml Wed Jan 16 16:32:04 2013 @@ -6,6 +6,10 @@ global: news: - + pubDate: Mon, 7 January 2013, 20:00 +0200 + title: "http://wiki.python.org taken down for recovery" + description: !rest "The Python wiki has been taken offline for recovery operations. Please see the `PSF blog <http://pyfound.blogspot.com/>`__ for details and updates." + - pubDate: Sat, 29 September 2012, 18:00 +0200 title: "Python 3.3.0 released" description: !rest "`Python 3.3.0 </download/releases/3.3.0/>`__ has been released." _______________________________________________ Pydotorg-checkins mailing list Pydotorg-checkins@python.org http://mail.python.org/mailman/listinfo/pydotorg-checkins
----- End forwarded message ----- -- Aahz (aahz@pythoncraft.com) <*> http://www.pythoncraft.com/ Weinberg's Second Law: If builders built buildings the way programmers wrote programs, then the first woodpecker that came along would destroy civilization.
On 16.01.2013 17:12, Aahz wrote:
Marc-Andre,
I have no objection to a news item, but I think the wiki being down is important enough that it should also stay at the top of the page, webmaster is getting constant pings about it. Is there some reason you removed it from the top?
Just to avoid duplication. We can readd it if you like. BTW: Isn't there some CSS to a highlight the notice in some way ?
Thanks, Aahz
----- Forwarded message from "marc-andre.lemburg" <pydotorg-checkins@python.org> -----
Date: Wed, 16 Jan 2013 16:32:04 +0100 (CET) From: "marc-andre.lemburg" <pydotorg-checkins@python.org> To: pydotorg-checkins@python.org Subject: [Pydotorg-checkins] r14559 - trunk/beta.python.org/build/data Reply-To: pydotorg@python.org
Author: marc-andre.lemburg Date: Wed Jan 16 16:32:04 2013 New Revision: 14559
Modified: trunk/beta.python.org/build/data/content.ht trunk/beta.python.org/build/data/newsindex.yml Log: Turn the wiki down notice into a news item.
Modified: trunk/beta.python.org/build/data/content.ht ============================================================================== --- trunk/beta.python.org/build/data/content.ht (original) +++ trunk/beta.python.org/build/data/content.ht Wed Jan 16 16:32:04 2013 @@ -62,9 +62,6 @@ PyKyra http://www.alobbs.com/pykyra 3D Rendering http://www.vrplumber.com/py3d.py
-Note: the Python wiki is currently down as of 2013-01-05 -(`<http://wiki.python.org/moin/>`__), we will post more details later. - **Python is a programming language that lets you work more quickly and integrate your systems more effectively. You can learn to use Python and see almost immediate gains in productivity and lower maintenance
Modified: trunk/beta.python.org/build/data/newsindex.yml ============================================================================== --- trunk/beta.python.org/build/data/newsindex.yml (original) +++ trunk/beta.python.org/build/data/newsindex.yml Wed Jan 16 16:32:04 2013 @@ -6,6 +6,10 @@ global: news: - + pubDate: Mon, 7 January 2013, 20:00 +0200 + title: "http://wiki.python.org taken down for recovery" + description: !rest "The Python wiki has been taken offline for recovery operations. Please see the `PSF blog <http://pyfound.blogspot.com/>`__ for details and updates." + - pubDate: Sat, 29 September 2012, 18:00 +0200 title: "Python 3.3.0 released" description: !rest "`Python 3.3.0 </download/releases/3.3.0/>`__ has been released." _______________________________________________ Pydotorg-checkins mailing list Pydotorg-checkins@python.org http://mail.python.org/mailman/listinfo/pydotorg-checkins
----- End forwarded message -----
-- Marc-Andre Lemburg eGenix.com Professional Python Services directly from the Source (#1, Jan 16 2013)
Python Projects, Consulting and Support ... http://www.egenix.com/ mxODBC.Zope/Plone.Database.Adapter ... http://zope.egenix.com/ mxODBC, mxDateTime, mxTextTools ... http://python.egenix.com/
2013-01-22: Python Meeting Duesseldorf ... 6 days to go ::::: Try our mxODBC.Connect Python Database Interface for free ! :::::: eGenix.com Software, Skills and Services GmbH Pastor-Loeh-Str.48 D-40764 Langenfeld, Germany. CEO Dipl.-Math. Marc-Andre Lemburg Registered at Amtsgericht Duesseldorf: HRB 46611 http://www.egenix.com/company/contact/
On Wed, Jan 16, 2013, M.-A. Lemburg wrote:
On 16.01.2013 17:12, Aahz wrote:
I have no objection to a news item, but I think the wiki being down is important enough that it should also stay at the top of the page, webmaster is getting constant pings about it. Is there some reason you removed it from the top?
Just to avoid duplication. We can readd it if you like.
Done
BTW: Isn't there some CSS to a highlight the notice in some way ?
Probably, but I don't know how to do that (nor especially do I know how to do that in reST). Anyone who knows the magic is welcome to do that. -- Aahz (aahz@pythoncraft.com) <*> http://www.pythoncraft.com/ Weinberg's Second Law: If builders built buildings the way programmers wrote programs, then the first woodpecker that came along would destroy civilization.
On Wed, Jan 16, 2013 at 11:19 AM, Aahz <aahz@pythoncraft.com> wrote:
On Wed, Jan 16, 2013, M.-A. Lemburg wrote:
BTW: Isn't there some CSS to a highlight the notice in some way ?
Probably, but I don't know how to do that (nor especially do I know how to do that in reST). Anyone who knows the magic is welcome to do that.
Done in r14561. -- David Goodger <http://python.net/~goodger>
On Wed, Jan 16, 2013, David Goodger wrote:
On Wed, Jan 16, 2013 at 11:19 AM, Aahz <aahz@pythoncraft.com> wrote:
On Wed, Jan 16, 2013, M.-A. Lemburg wrote:
BTW: Isn't there some CSS to a highlight the notice in some way ?
Probably, but I don't know how to do that (nor especially do I know how to do that in reST). Anyone who knows the magic is welcome to do that.
Done in r14561.
Thanks! -- Aahz (aahz@pythoncraft.com) <*> http://www.pythoncraft.com/ Weinberg's Second Law: If builders built buildings the way programmers wrote programs, then the first woodpecker that came along would destroy civilization.
The problem with the news item that it completely misses the fact about security breach. The purpose to make this visible on python.org instead of only wiki.python.org is to urge people to change their passwords. Current message fails to convey this. The announcement text: - http://wiki.python.org taken down for recovery The Python wiki has been taken offline for recovery operations. Please see the PSF blog <http://pyfound.blogspot.com/>for details and updates. + Report on security attack on Python Wiki On the XX December the MoinMoin instance that served python.org wikies has been compromised, all wiki data were erased. Edits over last XX months are lost, and the wiki VM is taken offline for recovery. Everybody is asked to change your python.org passwords as soon as possible if you use the same one for other services. For more information see the PSF blog<http://pyfound.blogspot.com/> . -- anatoly t. On Wed, Jan 16, 2013 at 8:19 PM, Aahz <aahz@pythoncraft.com> wrote:
On Wed, Jan 16, 2013, David Goodger wrote:
On Wed, Jan 16, 2013 at 11:19 AM, Aahz <aahz@pythoncraft.com> wrote:
On Wed, Jan 16, 2013, M.-A. Lemburg wrote:
BTW: Isn't there some CSS to a highlight the notice in some way ?
Probably, but I don't know how to do that (nor especially do I know how to do that in reST). Anyone who knows the magic is welcome to do that.
Done in r14561.
Thanks! -- Aahz (aahz@pythoncraft.com) <*> http://www.pythoncraft.com/
Weinberg's Second Law: If builders built buildings the way programmers wrote programs, then the first woodpecker that came along would destroy civilization. _______________________________________________ pydotorg-www mailing list pydotorg-www@python.org http://mail.python.org/mailman/listinfo/pydotorg-www
On Wed, Jan 16, 2013 at 2:13 PM, anatoly techtonik <techtonik@gmail.com> wrote:
The problem with the news item that it completely misses the fact about security breach.
The purpose to make this visible on python.org instead of only wiki.python.org is to urge people to change their passwords. Current message fails to convey this.
Right now, there would be no point. There is no way for people to change their passwords now, since the wiki is still down. Once the wiki is back up and people ARE able to change their passwords, such an announcement would be appropriate and useful. How about doing something to help fix things (volunteer!), rather than just complaining about what's wrong? -- David Goodger <http://python.net/~goodger>
On Wed, Jan 16, 2013 at 11:08 PM, David Goodger <goodger@python.org> wrote:
On Wed, Jan 16, 2013 at 2:13 PM, anatoly techtonik <techtonik@gmail.com> wrote:
The problem with the news item that it completely misses the fact about security breach.
The purpose to make this visible on python.org instead of only wiki.python.org is to urge people to change their passwords. Current message fails to convey this.
Right now, there would be no point. There is no way for people to change their passwords now, since the wiki is still down.
Once the wiki is back up and people ARE able to change their passwords, such an announcement would be appropriate and useful.
It's not for wiki. I use the same password across all python.org services, so I suspect that at least 5% of auditory use the same pattern.
How about doing something to help fix things (volunteer!), rather than just complaining about what's wrong?
1. I rewrote a news item so you won't have to crack your head 2. No access to any python sites to edit the news 3. There is not enough visibility into the process or any roadmap, so I (like other people) can't see what to help with 4. My help is not welcome here I write this only because nobody else raised this point, and I shouldn't write this to ML directly anyway.
On Thu, Jan 17, 2013 at 12:12 AM, anatoly techtonik <techtonik@gmail.com>wrote:
3. There is not enough visibility into the process or any roadmap, so I (like other people) can't see what to help with
To make this more constructive, the information lacking: 1. The date of the last backup of archive. 2. The state of MoinMoin site tree dumper (is it possible to get the tree structure of the wiki in consistent (sorted) view?) 3. The algorithm of searching for new pages in Google caches and web.archive.org (is there a way to detect new pages from the caches?) 4. The scraper state (does it compare the wiki html with cache html for every page to see if the information in cache is newer?) 4.1. How many pages were actually updated since last backup? 5. Does MoinMoin support enforced password change? 6. What is MoinMoin salt, is it using SSHA, is it the same for bugs.python.org and pypi.python.org, so that we can check if user used old password and invalidate this password on these sites as well? -- anatoly t.
participants (4)
-
Aahz -
anatoly techtonik -
David Goodger -
M.-A. Lemburg