Talk:Main Page: Difference between revisions

From ConsoleMods Wiki
Jump to navigation Jump to search
mNo edit summary
Line 52: Line 52:


Now, the MediaWiki core special page [[Special:Version]] lists information about this wiki and its software, like MediaWiki version, installed software libraries, installed MediaWiki extensions and skins and more. By default it is viewable by everyone, but on the ConsoleMods Wiki it's restricted to administrators. Why? It seems awfully silly, given that 1) it sounds awfully lot like "[[wikipedia:security through obscurity|security through obscurity]] and 2) the information can still be retrieved by anyone (yes, even anons (!)) via [[mw:API|the API entry point, api.php]]. --[[User:Jack Phoenix|Jack Phoenix]] ([[User talk:Jack Phoenix|talk]]) 18:49, 12 December 2023 (UTC)
Now, the MediaWiki core special page [[Special:Version]] lists information about this wiki and its software, like MediaWiki version, installed software libraries, installed MediaWiki extensions and skins and more. By default it is viewable by everyone, but on the ConsoleMods Wiki it's restricted to administrators. Why? It seems awfully silly, given that 1) it sounds awfully lot like "[[wikipedia:security through obscurity|security through obscurity]] and 2) the information can still be retrieved by anyone (yes, even anons (!)) via [[mw:API|the API entry point, api.php]]. --[[User:Jack Phoenix|Jack Phoenix]] ([[User talk:Jack Phoenix|talk]]) 18:49, 12 December 2023 (UTC)
* Generally, people reach out via [https://discord.gg/x5vEnkR4C8 our Discord] or via my user talk page, but it wouldn't be the worst idea for me to move the todo list to a separate talk page.
* To answer your question, it is indeed security through obscurity for the event that I might not have updated MediaWiki core in a timely manner. Generally, I update it very quickly, but hiding the Versions page may thwart the 1 in 10 attackers who might be too naive or not care enough to run the API call in the unlikely scenario that a major vulnerability is found and I haven't kept on top of things. In my opinion, it's better to have that miniscule bit of deterrence or extra hoop that an attacker must jump through. [[User:Derf|Derf]] ([[User talk:Derf|talk]]) 22:58, 12 December 2023 (UTC)

Revision as of 22:59, 12 December 2023

Looking for a live chat to discuss the wiki? Check out our Discord!

ConsoleMods.org To-Do List

These features will be implemented in the future.

Unsorted Content

This section is a list of unsorted content that needs research or for a wiki page to be created out of it.

Misc Talk

Why is Special:Version restricted to administrators?

First off, apologies if this is the wrong (on-wiki) place for this discussion. If so, I'd appreciate a pointer towards the correct page(s). :-)

Now, the MediaWiki core special page Special:Version lists information about this wiki and its software, like MediaWiki version, installed software libraries, installed MediaWiki extensions and skins and more. By default it is viewable by everyone, but on the ConsoleMods Wiki it's restricted to administrators. Why? It seems awfully silly, given that 1) it sounds awfully lot like "security through obscurity and 2) the information can still be retrieved by anyone (yes, even anons (!)) via the API entry point, api.php. --Jack Phoenix (talk) 18:49, 12 December 2023 (UTC)

  • Generally, people reach out via our Discord or via my user talk page, but it wouldn't be the worst idea for me to move the todo list to a separate talk page.
  • To answer your question, it is indeed security through obscurity for the event that I might not have updated MediaWiki core in a timely manner. Generally, I update it very quickly, but hiding the Versions page may thwart the 1 in 10 attackers who might be too naive or not care enough to run the API call in the unlikely scenario that a major vulnerability is found and I haven't kept on top of things. In my opinion, it's better to have that miniscule bit of deterrence or extra hoop that an attacker must jump through. Derf (talk) 22:58, 12 December 2023 (UTC)