[cumin1002:~] $ sudo cumin 'C:role::puppetmaster::frontend' 'systemctl list-units --state=failed'
..
[cumin1002:~] $ sudo cumin 'C:role::puppetmaster::backend' 'systemctl list-units --state=failed'
..
[cumin1002:~] $ sudo cumin 'C:role::puppetserver' 'systemctl list-units --state=failed'
..

Jul 10 2024, 11:03 PM · Patch-For-Review, Infrastructure-Foundations, Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Puppet-Infrastructure

gerritbot added a comment to T366272: Update puppet configuration to use GeoLite2 (free) instead of GeoIP2-Enterprise data.

Change #1053390 merged by Dzahn:

[operations/puppet@production] puppetmaster/puppetserver: remove MaxMind db product GeoIP2-Enterprise

https://gerrit.wikimedia.org/r/1053390

Jul 10 2024, 10:54 PM · Patch-For-Review, Infrastructure-Foundations, Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Puppet-Infrastructure

Stashbot added a comment to T366272: Update puppet configuration to use GeoLite2 (free) instead of GeoIP2-Enterprise data.

Mentioned in SAL (#wikimedia-operations) [2024-07-10T22:53:31Z] <mutante> puppetmaster1001 - remove Enterprise product ID from MaxMind downloads. sudo systemctl start geoip_update_ipinfo - T366272

Jul 10 2024, 10:53 PM · Patch-For-Review, Infrastructure-Foundations, Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Puppet-Infrastructure

gerritbot added a comment to T366272: Update puppet configuration to use GeoLite2 (free) instead of GeoIP2-Enterprise data.

Change #1053390 had a related patch set uploaded (by Dzahn; author: Dzahn):

[operations/puppet@production] puppetmaster/puppetserver: remove MaxMind db product GeoIP2-Enterprise

https://gerrit.wikimedia.org/r/1053390

Jul 10 2024, 10:17 PM · Patch-For-Review, Infrastructure-Foundations, Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Puppet-Infrastructure

kostajh added a comment to T366272: Update puppet configuration to use GeoLite2 (free) instead of GeoIP2-Enterprise data.

In T366272#9971036, @ssingh wrote:

I am not sure if I should do any cleanup here without running it by and hence just a comment and no action:

We have geoip_update_ipinfo.service failing on puppetmaster1001 (started by the timer of the same name):

Jul 10 04:30:01 puppetmaster1001 systemd[1]: Starting download geoip databases for the IPInfo extension from MaxMind...
Jul 10 04:30:02 puppetmaster1001 geoip_update_ipinfo[22062]: Received an unexpected HTTP status code of 403 from https://updates.maxmi
Jul 10 04:30:02 puppetmaster1001 geoip_update_ipinfo[22062]: Invalid product ID or subscription expired for GeoIP2-Enterprise
Jul 10 04:30:04 puppetmaster1001 systemd[1]: geoip_update_ipinfo.service: Main process exited, code=exited, status=1/FAILURE
Jul 10 04:30:04 puppetmaster1001 systemd[1]: geoip_update_ipinfo.service: Failed with result 'exit-code'.
Jul 10 04:30:04 puppetmaster1001 systemd[1]: Failed to start download geoip databases for the IPInfo extension from MaxMind.

sukhe@puppetmaster1001:~$ systemctl list-units --failed
  UNIT                        LOAD   ACTIVE SUB    DESCRIPTION                                                   
● geoip_update_ipinfo.service loaded failed failed download geoip databases for the IPInfo extension from MaxMind

Jul 10 2024, 9:15 PM · Patch-For-Review, Infrastructure-Foundations, Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Puppet-Infrastructure

ssingh added a comment to T366272: Update puppet configuration to use GeoLite2 (free) instead of GeoIP2-Enterprise data.

I am not sure if I should do any cleanup here without running it by and hence just a comment and no action:

Jul 10 2024, 7:18 PM · Patch-For-Review, Infrastructure-Foundations, Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Puppet-Infrastructure

Jun 25 2024

Dreamy_Jazz added a project to T124607: Create a special page for mass global (un)block: Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)).

Jun 25 2024, 10:57 AM · Trust and Safety Product Sprint, Patch-Needs-Improvement, User-Tks4Fish, GlobalBlocking, Stewards-and-global-tools

Dreamy_Jazz closed T364465: Display changes to protected status and flags on AbuseFilter history and diff pages as Resolved.

Jun 25 2024, 10:47 AM · MW-1.43-notes (1.43.0-wmf.9; 2024-06-11), Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), AbuseFilter

Dreamy_Jazz closed T364485: Alert a filter editor that a filter must be protected if it is saved with a protected variable as Resolved.

Jun 25 2024, 10:47 AM · MW-1.43-notes (1.43.0-wmf.10; 2024-06-18), Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Patch-For-Review, Trust and Safety Product Team, AbuseFilter

Dreamy_Jazz closed T366510: Allow ContributionsPager to fetch and show revisions from the `revision` or `archive` table as Resolved.

Jun 25 2024, 10:46 AM · MW-1.43-notes (1.43.0-wmf.10; 2024-06-18), Temporary accounts (Create/update essential tools/anti-abuse management), Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), CheckUser

kostajh changed the status of T355392: Confirm and update what information IPInfo users should be able to see from Open to Stalled.

In T355392#9836522, @kostajh wrote:

In T355392#9836512, @kostajh wrote:

In T355392#9816128, @JayCano wrote:

Given the above, I would suggest we go ahead with implementing the fallback using GeoLite2. It provides country, city and asn databases that should cover most of our use cases when an IP is not known for being problematic. If an IP is a proxy, VPN or has been suspect of bad behaviour, it would show up on Spur.

In this patch I have proposed that we show ASN, location and organization fields to users with the "view basic" right. These are originally sourced from GeoLite2. This patch checks if the user has "view full" right before attempting to add IPoid data. However, AIUI, even if we didn't check the right before adding IPoid data, the code is already set up to not overwrite existing fields because we use += for merging values into the data array, and GeoLite2 data is added first, so once asn, organization and location are populated by GeoLite2, they would not be overwritten by the IPoid retriever.

cc @MMoss_WMF about https://foundation.wikimedia.org/wiki/Legal:IP_Information_tool_guidelines. tl;dr we are now sourcing ASN, organization and location information from GeoLite2. Since this is a free database that anyone can download and use, I assume there is no need to gate access to that data behind the "view full" right anymore. (The guidelines currently state only administrator, bureaucrat, checkuser, oversight, or stewards may access those fields currently.)

Jun 25 2024, 10:46 AM · Trust and Safety Product Sprint, Temporary accounts, Trust and Safety Product Team, IP Info

kostajh closed T354597: Record IP reputation data for account creations and edits as Resolved.

Jun 25 2024, 10:45 AM · MW-1.43-notes (1.43.0-wmf.7; 2024-05-28), Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), User-kostajh, MediaWiki-extensions-IPReputation, Trust and Safety Product Team

kostajh changed the status of T355393: Provide fallbacks when source is missing data from Open to Stalled.

Jun 25 2024, 10:45 AM · Trust and Safety Product Sprint, IP Info

kostajh added a comment to T355393: Provide fallbacks when source is missing data.

The patches in this task are on hold pending clarification from the Legal, Safety & Security Service Center

Jun 25 2024, 10:32 AM · Trust and Safety Product Sprint, IP Info

Jun 24 2024

gerritbot added a comment to T356932: Allow Special:GlobalBlockList to show global blocks for accounts.

Change #1049257 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/GlobalBlocking@master] [WIP] Test GlobalBlockListPager

https://gerrit.wikimedia.org/r/1049257

Jun 24 2024, 7:14 PM · MW-1.43-notes (1.43.0-wmf.13; 2024-07-09), Trust and Safety Product Sprint (Sprint Cajon (Jun 24 - July 5)), Patch-For-Review, Trust and Safety Product Team, GlobalBlocking

gerritbot added a comment to T356932: Allow Special:GlobalBlockList to show global blocks for accounts.

Change #1040270 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[mediawiki/extensions/GlobalBlocking@master] Fully test SpecialGlobalBlockList

https://gerrit.wikimedia.org/r/1040270

Jun 24 2024, 7:08 PM · MW-1.43-notes (1.43.0-wmf.13; 2024-07-09), Trust and Safety Product Sprint (Sprint Cajon (Jun 24 - July 5)), Patch-For-Review, Trust and Safety Product Team, GlobalBlocking

Dreamy_Jazz moved T356932: Allow Special:GlobalBlockList to show global blocks for accounts from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)) board.

Jun 24 2024, 5:34 PM · MW-1.43-notes (1.43.0-wmf.13; 2024-07-09), Trust and Safety Product Sprint (Sprint Cajon (Jun 24 - July 5)), Patch-For-Review, Trust and Safety Product Team, GlobalBlocking

Dreamy_Jazz moved T356935: The 'globalblocks' API should support listing global blocks for accounts from In Progress to Needs Review on the Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)) board.

Jun 24 2024, 5:29 PM · Trust and Safety Product Sprint (Sprint Koto (July 15 - July 26)), MW-1.43-notes (1.43.0-wmf.13; 2024-07-09), Trust and Safety Product Team, GlobalBlocking

kostajh closed T368258: Update MediaModeration email address to wiki@wikimedia.org as Resolved.

Jun 24 2024, 2:33 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Stashbot added a comment to T368258: Update MediaModeration email address to wiki@wikimedia.org.

Mentioned in SAL (#wikimedia-operations) [2024-06-24T13:44:10Z] <urbanecm@deploy1002> Finished scap: Backport for [[gerrit:1048014|mediawiki.org: Sync xml/export-*.xsd files with MW core (T343622)]], [[gerrit:1039597|CommonSettings: Restore the original behaviour of Reference Previews (T366419)]], [[gerrit:rGERRIT10491539569d|[MediaModeration] Update 'From' email address to wiki@wikimedia.org (T368258)]] (duration: 35m 30s)

Jun 24 2024, 1:44 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Maintenance_bot removed a project from T368258: Update MediaModeration email address to wiki@wikimedia.org: Patch-For-Review.

Jun 24 2024, 1:30 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Stashbot added a comment to T368258: Update MediaModeration email address to wiki@wikimedia.org.

Mentioned in SAL (#wikimedia-operations) [2024-06-24T13:24:26Z] <urbanecm@deploy1002> urbanecm, func, dreamyjazz: Backport for [[gerrit:1048014|mediawiki.org: Sync xml/export-*.xsd files with MW core (T343622)]], [[gerrit:1039597|CommonSettings: Restore the original behaviour of Reference Previews (T366419)]], [[gerrit:rGERRIT10491539569d|[MediaModeration] Update 'From' email address to wiki@wikimedia.org (T368258)]] synced to the testservers (https://wikitech.wikimedia.org/wiki/Mwdebug)

Jun 24 2024, 1:24 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Dreamy_Jazz closed T367760: No autoblock is performed when the target account has no CU data for edits but has CU data for log events as Resolved.

Jun 24 2024, 1:21 PM · MW-1.43-notes (1.43.0-wmf.11; 2024-06-25), Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Trust and Safety Product Team, CheckUser

Dreamy_Jazz closed T367760: No autoblock is performed when the target account has no CU data for edits but has CU data for log events, a subtask of T360685: Stop writing old for event table migration on WMF wikis, as Resolved.

Jun 24 2024, 1:20 PM · Trust and Safety Product Sprint (Sprint Cajon (Jun 24 - July 5)), Trust and Safety Product Team, CheckUser

Dreamy_Jazz moved T368258: Update MediaModeration email address to wiki@wikimedia.org from In Progress to Needs Review on the Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)) board.

Jun 24 2024, 1:18 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Stashbot added a comment to T368258: Update MediaModeration email address to wiki@wikimedia.org.

Mentioned in SAL (#wikimedia-operations) [2024-06-24T13:08:40Z] <urbanecm@deploy1002> Started scap: Backport for [[gerrit:1048014|mediawiki.org: Sync xml/export-*.xsd files with MW core (T343622)]], [[gerrit:1039597|CommonSettings: Restore the original behaviour of Reference Previews (T366419)]], [[gerrit:rGERRIT10491539569d|[MediaModeration] Update 'From' email address to wiki@wikimedia.org (T368258)]]

Jun 24 2024, 1:08 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

gerritbot added a comment to T368258: Update MediaModeration email address to wiki@wikimedia.org.

Change #1049153 merged by jenkins-bot:

[operations/mediawiki-config@master] [MediaModeration] Update 'From' email address to wiki@wikimedia.org

https://gerrit.wikimedia.org/r/1049153

Jun 24 2024, 1:04 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

gerritbot added a project to T368258: Update MediaModeration email address to wiki@wikimedia.org: Patch-For-Review.

Jun 24 2024, 12:56 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

gerritbot added a comment to T368258: Update MediaModeration email address to wiki@wikimedia.org.

Change #1049153 had a related patch set uploaded (by Dreamy Jazz; author: Dreamy Jazz):

[operations/mediawiki-config@master] [MediaModeration] Update 'From' email address to wiki@wikimedia.org

https://gerrit.wikimedia.org/r/1049153

Jun 24 2024, 12:56 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Dreamy_Jazz moved T368258: Update MediaModeration email address to wiki@wikimedia.org from Priority Backlog to In Progress on the Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)) board.

Jun 24 2024, 12:53 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

Dreamy_Jazz claimed T368258: Update MediaModeration email address to wiki@wikimedia.org.

Jun 24 2024, 12:51 PM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MediaModeration (MediaModeration 2.0)

kostajh updated the task description for T359653: Set temporary account expiration at 90 days.

Jun 24 2024, 11:21 AM · Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), MW-1.43-notes (1.43.0-wmf.11; 2024-06-25), Temporary accounts

kostajh closed T365049: Investigate what to do about the AbuseFilter log revealing someone's IP address via historical logs, a subtask of T363906: [Epic] Ensure filters that use PII-sensitive variables are protected, as Resolved.

Jun 24 2024, 9:44 AM · Trust and Safety Product Sprint (Sprint Erhu (August 5th - August 16th)), Epic, Temporary accounts (Blockers to minor pilot wiki deployment), MW-1.43-notes (1.43.0-wmf.10; 2024-06-18), Patch-For-Review, Trust and Safety Product Team, AbuseFilter

Jun 22 2024

Djackson-ctr moved T367760: No autoblock is performed when the target account has no CU data for edits but has CU data for log events from Needs QA to Done on the Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)) board.

Per the ticket Description, I have verified the new code has been implemented and is functioning and displaying as expected... Good Work @Dreamy_Jazz!!!

Jun 22 2024, 4:01 AM · MW-1.43-notes (1.43.0-wmf.11; 2024-06-25), Trust and Safety Product Sprint (Sprint Melodica (Jun 3 - Jun 14)), Trust and Safety Product Team, CheckUser