Timeline


and

10/14/14:

10:53 Ticket #793 (MediaWiki Security and Maintenance Release 1.23.5) closed by chris
fixed: Closing ticket as this is resolved.
10:36 Ticket #796 (Piwik 2.8.0) closed by chris
fixed: Key issues are: > == Security fixes == > > We would like to thank …
10:25 PiwikServer edited by chris
Added link to PiwikServer 2.8.0 ticket:796 (diff)
10:20 Ticket #796 (Piwik 2.8.0) created by chris
> Piwik 2.8.0 is a new major release of Piwik. In this release we have …

10/13/14:

10:11 Ticket #794 (Time estimate: change TN.org background image) updated by ed
Thanks Ben

10/11/14:

00:40 Ticket #794 (Time estimate: change TN.org background image) updated by ben
[…]

10/10/14:

21:42 SecurityInfo edited by chris
Added link to regenerate certs using SHA256 ticket:795 (diff)
21:37 Ticket #795 (SHA1 Deprecation: Regenerate all certs using SHA256) created by chris
SHA1 SSL certs and chains are now …
14:53 Ticket #785 (SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)) closed by paul
fixed: I got the power ..
14:45 Ticket #785 (SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)) updated by ed
close away paul - DIY - no need to wait for me :)
14:42 Ticket #770 (IIRS development code) updated by paul
Sorry Annesley for not replying earlier. Do you have any questions?
14:39 Ticket #785 (SA-CONTRIB-2014-086 - Custom BreadCrumbs - Cross Site Scripting (XSS)) updated by paul
Add Hours to Ticket, Total Hours changed
@Ed I think we can close this ticket. Actually there are only a couple of …
14:24 Ticket #755 (Site administrator's file upload capacity: not responding to changes) closed by ed
fixed
14:18 Ticket #769 (Locked myself out of puffin again) updated by paul
@Annesley I think this can reassigned to Chris & closed.
14:17 Ticket #758 (* Advisory ID: DRUPAL-SA-CORE-2014-003) updated by paul
@Ed I think this ticket can be closed.
14:14 Ticket #712 (Create a new stgX.transitionnetwork.org site) updated by paul
Add Hours to Ticket, Total Hours changed
@Sam Do you have any further questions? Do you still think the wiki …
14:06 Ticket #727 (Change background on block from orange to white) updated by paul
@Sam I think we're ok to close this ticket.
14:04 Ticket #755 (Site administrator's file upload capacity: not responding to changes) updated by paul
Add Hours to Ticket, Total Hours changed
@Ed It looks as though status can be changed to resolved/fixed. The …
13:49 Ticket #742 (Stg site to play with) updated by paul
Add Hours to Ticket, Total Hours changed
@Sam This can probably be closed. Are you having any current problems …
13:38 Ticket #741 (Views editor disappears in backend) updated by paul
Add Hours to Ticket, Total Hours changed
@Sam Have you experienced this problem over the last few months? Just …
13:28 Ticket #715 (Views admin pages not visible.) updated by paul
Add Hours to Ticket, Total Hours changed
@Sam I think we can close this ticket? Other gotchas that come to mind …
12:58 Ticket #646 (Users denied access when trying to unsubscrbie) updated by paul
Add Hours to Ticket, Total Hours changed
I have created a new test account & subscribed to the Transition Network …
12:44 Ticket #646 (Users denied access when trying to unsubscrbie) updated by paul
I'll try and reproduce the problem ..
12:42 Ticket #646 (Users denied access when trying to unsubscrbie) updated by paul
Add Hours to Ticket, Total Hours changed
Sorry , this has completely fallen of my radar. It sounds like the user …
11:51 Ticket #701 (Emails & Telephone calls) updated by paul
Add Hours to Ticket, Total Hours changed
Just checked to see if the recent rounds of drupal security updates apply …
10:06 Ticket #794 (Time estimate: change TN.org background image) created by ed
Rob is thinking about doing a 1970s editorial month, and would like a …

10/08/14:

20:33 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
Debian …
13:35 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
Debian …

10/03/14:

15:50 Ticket #764 (Policy decisions re-assessment on BOA and Drupal security updates) updated by ed
@Paul - that would be interesting now, but not strictly relevant until the …
13:35 TransitionMaintenance edited by ed
(diff)
13:02 Ticket #787 (Access to Parrot) updated by ed
Milestone changed
changed to milestone: maintenance for monthly tally
13:02 Ticket #789 (SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)) updated by ed
changed to maintenance milestone for monthly tally
13:01 Ticket #789 (SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)) updated by ed
Milestone changed

10/02/14:

10:25 Ticket #793 (MediaWiki Security and Maintenance Release 1.23.5) updated by chris
Add Hours to Ticket, Total Hours changed
Following the MediaWiki#Updates notes: […] I tested the site and it …
10:13 MediaWiki edited by chris
Added link to MediaWiki 1.23.5 - ticket:793 (diff)
09:57 Ticket #793 (MediaWiki Security and Maintenance Release 1.23.5) created by chris
Announcement …

10/01/14:

14:02 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
PenguinServer Nginx and Passenger update: […]
12:43 Ticket #783 (IIRS design and development) updated by annesley
Add Hours to Ticket, Total Hours changed
12:42 Ticket #757 (Research and Design for TNv3) updated by annesley
Add Hours to Ticket, Total Hours changed
12:26 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
Add Hours to Ticket, Total Hours changed
12:21 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
Missed posting the Debian …
10:26 Ticket #764 (Policy decisions re-assessment on BOA and Drupal security updates) updated by paul
Add Hours to Ticket, Total Hours changed
@Ed There could be some benefit in going over the selection and comparing …
10:22 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by ed
It sounds to me like this isn't going to reach a straight forward …
10:19 Ticket #764 (Policy decisions re-assessment on BOA and Drupal security updates) updated by ed
@Paul if there are immediate benefits to the existing D6 site, then it's …

09/30/14:

12:03 Ticket #764 (Policy decisions re-assessment on BOA and Drupal security updates) updated by paul
Add Hours to Ticket, Total Hours changed
@Ed Very interesting. Even if we don't use this as our core distribution …
10:00 Ticket #764 (Policy decisions re-assessment on BOA and Drupal security updates) updated by chris
Replying to ed: > Ed received an email from Nicholas Roberts …
09:51 Ticket #764 (Policy decisions re-assessment on BOA and Drupal security updates) updated by ed
Ed received an email from Nicholas Roberts (http://www.niccolox.org/) …

09/29/14:

20:47 Ticket #788 (New BOA-2.3.3 Stable Edition available) closed by chris
fixed: Following PuffinServer#UpgradingBOA […] While the above was running …
20:14 Ticket #788 (New BOA-2.3.3 Stable Edition available) updated by chris
I'm going to run the upgrade now.
11:15 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) updated by paul
Add Hours to Ticket, Total Hours changed
Roger that. The problem was just that the update module was disabled on …
11:03 PuffinServer edited by chris
Link to BOA-2.3.3 ticket:788 added (diff)
11:00 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) updated by chris
Component changed
10:59 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) updated by chris
Add Hours to Ticket, Cc, Milestone changed
Replying to paul: > @Chris > > My stage site is not loading. …
10:48 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) updated by paul
Add Hours to Ticket, Total Hours changed
Production updated.
10:31 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) updated by paul
Sorry, it just seems to be the update page. I'll have another look .. …
10:29 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) updated by paul
Add Hours to Ticket, Total Hours changed
@Chris My stage site is not loading. Would you investigate. Thanks. …
10:28 Ticket #792 ([Security-news] SA-CONTRIB-2014-094 - Webform Patched - Cross Site ...) created by paul
View online: https://www.drupal.org/node/2344369 * Advisory ID: …
10:22 Ticket #788 (New BOA-2.3.3 Stable Edition available) updated by chris
Summary changed
Sorry this update hasn't been done yet, I'm going to try to get it …

09/26/14:

11:36 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
I have found with WordPress that the only way to set it up securely with …
11:29 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
FYI i am following the same issue (with Security tag) on the WordPress
10:59 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Replying to annesley: > > {{{ > $base_url = …
10:51 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Protocol independent URLs are probably the best thing to use then: * …
10:34 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
you're right chris. a concern i have about moving to relative URLs was …
10:23 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
I installed a new version of bash in the early hours, see …

09/25/14:

19:18 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
This thread on this issue might have a solution …
18:45 Ticket #791 (Piwik 2.7.0) closed by chris
fixed: Following the PiwikServer#Updates notes, set record_statistics to 0 in …
18:44 PiwikServer edited by chris
Link to Piwik 2.7.0 ticket:791 added (diff)
18:29 Ticket #791 (Piwik 2.7.0) created by chris
The changelog for 2.7.0
18:20 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Replying to annesley: > so: the various levels of caching in …
09:51 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
Bad [https://lists.debian.org/debian-security-announce/2014/msg00220.html

09/24/14:

14:51 Ticket #790 (Annesley locked out of puffin) updated by annesley
yep, i agree. just trying my luck ;) i have to sort out my Dolphin …
14:32 Ticket #692 (Debian Updates) updated by chris
New Nginx on PenguinServer: […]
12:14 Ticket #790 (Annesley locked out of puffin) updated by chris
Add Hours to Ticket, Cc, Total Hours changed
Replying to annesley: > it's my Dolphin file explorer failing …
11:39 Ticket #790 (Annesley locked out of puffin) updated by annesley
it's my Dolphin file explorer failing again. could we place the …

09/23/14:

17:52 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
Incredible: > An attacker able to man-in-the-middle a HTTP request to an …
16:49 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
ok, the patch is not for our version of imagecache and, indeed, most of …
15:17 Ticket #790 (Annesley locked out of puffin) updated by chris
Add Hours to Ticket, Total Hours changed
5 ssh password login failures in 300 seconds caused CSF / LDF to use …
15:05 Ticket #790 (Annesley locked out of puffin) created by chris
Email from lfd: […]
13:41 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
actually, i'm not sure that this patch is valid for imagecache …
11:04 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by paul
Add Hours to Ticket, Total Hours changed
Thanks Ed, @Annseley Let me know if anything needs publishing. Sorry if …
10:51 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by ed
hold on hold no - we agreed that Paul would do pushes to live. I'm happy …
10:51 SecurityInfo edited by chris
(diff)
10:49 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
See also wiki:SecurityInfo
10:47 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Add Hours to Ticket, Total Hours changed
Replying to annesley: > > i get an SSL error when going to …
10:41 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
ok, i will wait for their input. i can already do everything apart from …
10:29 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Replying to annesley: > the patch needs to be uploaded in to …
10:23 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
sorry chris! it was a gender aware joke. i mean "is that too cowboy" as …
10:13 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by ed
i'm happy for you to proceed but not for this to go on much longer
10:11 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Replying to annesley: > > is that too cowperson? Sorry I …
09:56 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
so: the various levels of caching in Drupal, authentication scenarios and …
09:34 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by annesley
sure! thinking... :)

09/22/14:

14:25 Ticket #789 (SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)) updated by paul
Add Hours to Ticket, Total Hours changed
Done. Manually updated the module on production. Profile did not need …
14:12 Ticket #789 (SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)) updated by paul
Add Hours to Ticket, Total Hours changed
Updating now ..
14:09 Ticket #789 (SA-CONTRIB-2014-088 - Mollom - Cross-site scripting (XSS)) created by paul
View online: https://www.drupal.org/node/2340029 * Advisory ID: …
14:08 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by paul
Add Hours to Ticket, Total Hours changed
Sorry guys, I have been working on a big project for a client. I …
12:54 Ticket #788 (New BOA-2.3.3 Stable Edition available) updated by chris
Summary changed
There is another new version out, I didn't get around to doing the …

09/16/14:

19:46 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
Just like busses... Debian …
18:59 Ticket #692 (Debian Updates) updated by chris
Add Hours to Ticket, Total Hours changed
This is a shocker, Debian …
15:01 Ticket #787 (Access to Parrot) updated by annesley
thanks. that worked
14:50 Ticket #787 (Access to Parrot) updated by chris
I have reset it and it is in this file: ~/private/passwd.txt
14:47 Ticket #787 (Access to Parrot) updated by annesley
i need access to ​https://parrot.transitionnetwork.org/phpmyadmin/ now. …
14:29 Ticket #786 (GitHub Transition: Annesley needs permission to create repositories) updated by annesley
thanks. working fine.
13:59 Ticket #786 (GitHub Transition: Annesley needs permission to create repositories) closed by chris
fixed: Replying to annesley: > is Paul the owner of Transition …
13:43 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by chris
Replying to paul: > > I'll leave this one with you Chris as …
12:57 Ticket #787 (Access to Parrot) updated by chris
Replying to annesley: > mysqldump feeding in to the DB now... …
12:40 Ticket #787 (Access to Parrot) updated by annesley
ok, that's working fine now. the connection is not dropping at all. looks …
11:44 Ticket #787 (Access to Parrot) updated by chris
Add Hours to Ticket, Total Hours changed
Replying to annesley: > i will let you know immediately if …
11:44 Ticket #680 (Mixed content: HTTP content on HTTPS version of site) updated by paul
Add Hours to Ticket, Total Hours changed
@Chris Sorry for the delay in responding. I'll leave this one with you …
11:34 Ticket #787 (Access to Parrot) updated by annesley
thanks Chris! also: i will let you know immediately if anything happens …
11:32 Ticket #787 (Access to Parrot) updated by annesley
ssh-rsa …
10:50 Ticket #787 (Access to Parrot) updated by chris
annesley you can: 1. Append your second ssh public key to your existing …

09/15/14:

10:22 Ticket #787 (Access to Parrot) updated by chris
Add Hours to Ticket, Total Hours changed
Replying to annesley: > is it ok for me to send through my …
10:21 Ticket #788 (New BOA-2.3.3 Stable Edition available) created by chris
Changelog: http://bit.ly/boa-changes […] Having read through the …
08:32 Ticket #783 (IIRS design and development) updated by annesley
Add Hours to Ticket, Total Hours changed
IIRS work 2014-06 to 2014-08 inclusive: about 1/3 of the time in July …
08:22 Ticket #787 (Access to Parrot) updated by annesley
Type changed
08:21 Ticket #787 (Access to Parrot) created by annesley
is it ok for me to send through my normal, non-passphrase protected public …
08:17 Ticket #786 (GitHub Transition: Annesley needs permission to create repositories) created by annesley
is Paul the owner of Transition GitHub??
Note: See TracTimeline for information about the timeline view.