Page MenuHomePhabricator
Feed Advanced Search

Feb 7 2019

amckinley accepted D20123: Allow users to be approved from the profile "Manage" page, alongside other similar actions.
Feb 7 2019, 8:51 PM
amckinley accepted D20121: Make the default behavior of getApplicationTransactionCommentObject() "return null" instead of "throw".
Feb 7 2019, 8:47 PM
amckinley accepted D20125: Fix two very, very minor correctness issues in Slowvote.
Feb 7 2019, 8:44 PM
amckinley accepted D20120: When users have no password on their account, guide them through the "reset password" flow in the guise of "set password".
Feb 7 2019, 8:42 PM
amckinley accepted D20119: Don't show "registration might be too open" warnings unless an auth provider actually allows registration.
Feb 7 2019, 8:36 PM
amckinley accepted D20118: Allow users to register with non-registration providers if they are invited to an instance.
Feb 7 2019, 8:35 PM
amckinley accepted D20117: Make external link/refresh use provider IDs, switch external account MFA to one-shot.
Feb 7 2019, 8:31 PM
amckinley accepted D20116: Explicitly fail if `phutil_build_http_querystring()` is passed a map of nonscalars.
Feb 7 2019, 8:25 PM
amckinley accepted D20115: Add formal setup guidance warning that "feed.http-hooks" will be removed in a future version of Phabricator.
Feb 7 2019, 8:24 PM
amckinley accepted D20114: Revert "feed.http-hooks" HTTP request construction to use "http_build_query()" so nested "storyData" is handled correctly.
Feb 7 2019, 8:23 PM
amckinley accepted D20113: Make external account unlinking use account IDs, not "providerType + providerDomain" nonsense.
Feb 7 2019, 8:18 PM
amckinley committed rPf2236eb061a6: Autofocus form control for adding TOTP codes (authored by amckinley).
Autofocus form control for adding TOTP codes
Feb 7 2019, 7:57 PM
amckinley closed D20128: Autofocus form control for adding TOTP codes.
Feb 7 2019, 7:56 PM
amckinley accepted D20110: Remove the highly suspect "Import from LDAP" workflow.

Do you think we should build T5953 before removing this? I worry that's a very large amount of work.

Feb 7 2019, 7:56 PM
amckinley accepted D20122: On login forms, autofocus the "username" field.
Feb 7 2019, 7:40 PM
amckinley awarded D20122: On login forms, autofocus the "username" field a 100 token.
Feb 7 2019, 7:39 PM
amckinley requested review of D20128: Autofocus form control for adding TOTP codes.
Feb 7 2019, 7:39 PM
amckinley accepted D20112: Give ExternalAccount a providerConfigPHID, tying it to a particular provider.
Feb 7 2019, 7:23 PM
amckinley accepted D20111: During first-time setup, create an administrator account with no authentication instead of weird, detached authentication.
Feb 7 2019, 6:40 PM
amckinley added a comment to D20110: Remove the highly suspect "Import from LDAP" workflow.

FWIW, I definitely used this import flow in a previous life and it worked for me. I'd like to have some other technique for bulk user creation before totally blowing this code away.

Feb 7 2019, 6:34 PM
amckinley accepted D20109: Convert a manual query against external accounts into a modern Query.
Feb 7 2019, 6:32 PM
amckinley accepted D20108: Remove weird integration between Legalpad and the ExternalAccount table.
Feb 7 2019, 6:32 PM

Feb 6 2019

amckinley accepted D20107: Make two ancient migrations fatal if they affect data.
Feb 6 2019, 5:46 PM
amckinley accepted D20106: Allow users to unlink their last external account with a warning, instead of preventing the action.
Feb 6 2019, 5:44 PM
amckinley accepted D20105: In "External Accounts", replace hard-to-find tiny "link" icon with a nice button with text on it.
Feb 6 2019, 5:41 PM
amckinley accepted D20104: Clarify "metamta.default-address" instructions and lock the option.
Feb 6 2019, 5:39 PM

Feb 5 2019

amckinley removed a revision from T13224: Pygments Bash lexer has explosive complexity on unterminated strings with many backslashes: Unknown Object (Differential Revision).
Feb 5 2019, 11:43 PM · Infrastructure
amckinley awarded T13245: Improve MFA security by using replacing SMS code digits with emoji a Burninate token.
Feb 5 2019, 11:15 PM · Security
amckinley added a comment to D20102: Remove one-time login from username change email.

Long ago, passwords were digested with usernames as part of the salt.

Feb 5 2019, 11:06 PM
amckinley accepted D20102: Remove one-time login from username change email.
Feb 5 2019, 10:28 PM
amckinley accepted D20100: Always allow users to login via email link, even if an install does not use passwords.
Feb 5 2019, 9:46 PM
amckinley accepted D20099: Remove obsolete "PhabricatorAuthLoginHandler".
Feb 5 2019, 9:32 PM
amckinley accepted D20097: Improve feed rendering of user rename story.
Feb 5 2019, 9:00 PM
amckinley accepted D20096: Move the Auth Provider edit flow toward a more modern layout.
Feb 5 2019, 8:57 PM
amckinley accepted D20095: Replace "Add Auth Provider" radio buttons with a more modern "click to select" UI.
Feb 5 2019, 8:35 PM
amckinley accepted D20094: Begin adding more guidance to the "One-Time Login" flow.
Feb 5 2019, 8:32 PM
amckinley added a comment to D20083: Recover from rare EINTR signal interruptions during "stream_select(..., 0)".

...wherein the return value of fwrite() (in C) is ignored and str_len is returned unconditionally.

Feb 5 2019, 8:29 PM
amckinley accepted D20093: Make the mobile menu available in "/mail/".
Feb 5 2019, 8:20 PM
amckinley added a comment to D20083: Recover from rare EINTR signal interruptions during "stream_select(..., 0)".

But, I still can't get it to do anything interesting when I SIGHUP it.

Feb 5 2019, 8:19 PM
amckinley accepted D20091: In Owners Packages, make the API representation of the "Auditing" field more consistent.
Feb 5 2019, 8:12 PM
amckinley accepted D20088: Give Duo MFA a stronger hint if users continue without answering the challenge.
Feb 5 2019, 8:08 PM
amckinley accepted D20083: Recover from rare EINTR signal interruptions during "stream_select(..., 0)".

I can't get signals during fwrite() to do anything.

Feb 5 2019, 8:07 PM
amckinley accepted D20087: Add a "metronome" for spreading service call load.
Feb 5 2019, 7:57 PM
amckinley added inline comments to D20083: Recover from rare EINTR signal interruptions during "stream_select(..., 0)".
Feb 5 2019, 7:50 PM
amckinley requested changes to D20083: Recover from rare EINTR signal interruptions during "stream_select(..., 0)".
  • fwrite() returns 0.
  • stream_select() errors.
  • The stream is legitimately in a dead/error/failures state and should not be retried.
Feb 5 2019, 7:22 PM
amckinley added a comment to T13243: Writing to streams can run into issues with EINTR.

That upstream bug report is really something else.

Feb 5 2019, 6:50 PM · Infrastructure
amckinley accepted D20086: Slightly update the Diviner documentation.
Feb 5 2019, 6:20 PM

Feb 2 2019

amckinley accepted D20085: [Wilds] Make "arc anoid" system requirements more accurate.

Nice.

Feb 2 2019, 3:24 PM

Feb 1 2019

amckinley accepted D20081: Let omnipotent actors skip MFA transactions.
Feb 1 2019, 7:00 PM
amckinley created Image Macro "butwhy".
Feb 1 2019, 6:12 PM
amckinley accepted D20078: Make repository daemons periodically check for out-of-sync repositories.
Feb 1 2019, 4:27 AM
amckinley accepted D20077: Allow "inactive" repositories to be read over SSH for cluster sync.
Feb 1 2019, 4:22 AM
amckinley accepted D20075: Allow parent and child revisions to be modified via Conduit.
Feb 1 2019, 4:06 AM
amckinley accepted D20073: Read POST data sightly earlier in request startup.
Feb 1 2019, 4:01 AM
amckinley accepted D20068: Don't load unnecessary handle data on "transaction.search".
Feb 1 2019, 3:56 AM
amckinley added a comment to D20067: Slightly improve performance of querystring construction by caching results.

I'm a little surprised that this would have a significant performance impact, but maybe I'm underestimating the amount of query string building we do.

Feb 1 2019, 3:52 AM
amckinley accepted D20067: Slightly improve performance of querystring construction by caching results.
Feb 1 2019, 3:51 AM

Jan 31 2019

amckinley accepted D20069: Provide a portable mail MIME header decoding function in libphutil.
Jan 31 2019, 2:48 AM
amckinley accepted D20070: Remove "iconv" PHP extension dependency.
Jan 31 2019, 2:47 AM
amckinley accepted D20071: Hide "Signed with MFA" stories from feed.
Jan 31 2019, 2:46 AM
amckinley accepted D20072: Update a factor query in TransactionEditor for providers.
Jan 31 2019, 2:45 AM
amckinley accepted D20065: Improve handling of "Deny" responses from Duo.
Jan 31 2019, 2:45 AM
amckinley accepted D20063: Correct a bug where milestone "spacePHID" columns could become desynchronized.
Jan 31 2019, 2:39 AM
amckinley accepted D20057: Allow modular transactions to override transaction title and body text in mail.
Jan 31 2019, 2:26 AM
amckinley accepted D20056: Allow diff change detection to complete for Mercurial changes which remove a binary file.
Jan 31 2019, 2:22 AM
amckinley accepted D20053: Replace manual query string construction with "phutil_build_http_querystring()".
Jan 31 2019, 2:20 AM

Jan 30 2019

amckinley accepted D20059: Give MFA gates a more consistent UI.
Jan 30 2019, 6:39 AM
amckinley accepted D20054: Use "exec" to skip the Dash intermediate shell for "pygmentize".
Jan 30 2019, 6:25 AM
amckinley accepted D20049: Provide "phutil_build_http_querystring()", like "http_build_query()" but not wrong by default.
Jan 30 2019, 6:20 AM
amckinley accepted D20046: Read "$_POST" before hooking the profiler, and remove "aphront.default-application-configuration-class".

I would kind of like to see these changes split into two diffs, but there's nothing wrong with reverting the whole thing if this causes problems.

Jan 30 2019, 6:13 AM

Jan 29 2019

amckinley accepted D20049: Provide "phutil_build_http_querystring()", like "http_build_query()" but not wrong by default.
Jan 29 2019, 3:33 AM
amckinley requested changes to D20049: Provide "phutil_build_http_querystring()", like "http_build_query()" but not wrong by default.

Marking this as changes requested because I think the PhutilURI.php change is wrong.

Jan 29 2019, 3:25 AM
amckinley created Image Macro "yourewelcome".
Jan 29 2019, 3:22 AM
amckinley accepted D20043: Allow MFA enrollment guidance to be customized.
Jan 29 2019, 3:15 AM
amckinley accepted D20041: Provide an Editor extension point for transaction validation.
Jan 29 2019, 2:59 AM
amckinley accepted D20047: Use "null", not "-1", as a local "no version" marker when performing intracluster repository sync.
Jan 29 2019, 2:44 AM
amckinley added a comment to D20047: Use "null", not "-1", as a local "no version" marker when performing intracluster repository sync.

Thanks for fixing this. When I get back let's make sure I can repro these cluster issues in my dev environment and update the docs (and/or finish my workflow script for automatically setting up all this state for dev environments, which is arguably better than documentation).

Jan 29 2019, 2:43 AM
amckinley accepted D20044: Warn users about MFA requirements when interacting with "MFA Required" objects via the comment form.
Jan 29 2019, 2:39 AM
amckinley accepted D20045: Add a warning about MFA requirements to edit forms.

Ok I'm on board.

Jan 29 2019, 2:38 AM
amckinley updated the summary of D20044: Warn users about MFA requirements when interacting with "MFA Required" objects via the comment form.
Jan 29 2019, 2:38 AM
amckinley added a comment to D20045: Add a warning about MFA requirements to edit forms.

Oh, there's more context in D20044, hang on.

Jan 29 2019, 2:37 AM
amckinley added a comment to D20045: Add a warning about MFA requirements to edit forms.

This change looks good, but what exactly does it accomplish? I feel like this would be useful if a user was trying to take an action that required MFA, but their account had no MFA factors configured, but is such a thing even possible? Otherwise this feels like a message that we train users to ignore whenever they see it.

Jan 29 2019, 2:37 AM
amckinley accepted D20040: Support subtypes in Projects.

FWIW I only read the last few comments on PHI1039, but I think I got the gist of this change. I definitely think we should merge the Maniphest and Projects subtype implementations before adding a third subtype Edit Engine, though. On the other hand, I'm not sure what object would be next in line to get the subtype treatment, so maybe this is all fine.

Jan 29 2019, 2:25 AM
amckinley added a comment to D20039: Bring Duo MFA upstream.

Also, BOY, this is a lot of code.

Jan 29 2019, 2:15 AM
amckinley updated the summary of D20040: Support subtypes in Projects.
Jan 29 2019, 2:12 AM
amckinley accepted D20039: Bring Duo MFA upstream.
Jan 29 2019, 2:07 AM

Jan 28 2019

amckinley added a comment to D20039: Bring Duo MFA upstream.

This is half-reviewed; more coming soon.

Jan 28 2019, 9:30 PM
amckinley accepted D20038: Require MFA to edit MFA providers.
Jan 28 2019, 5:00 PM
amckinley accepted D20037: Replace "Show Secret" in Passphrase with one-shot MFA.
Jan 28 2019, 5:00 PM
amckinley accepted D20036: Convert "Rename User" from session MFA to one-shot MFA.
Jan 28 2019, 4:59 PM
amckinley accepted D20042: Don't put "spacePHID IN (...)" constraints in queries which will raise policy exceptions.
Jan 28 2019, 4:57 PM

Jan 26 2019

amckinley accepted D20035: Get rid of "throwResult()" for control flow in MFA factors.
Jan 26 2019, 7:18 PM
amckinley accepted D20034: Add more factor details to the Settings factor list.
Jan 26 2019, 7:17 PM
amckinley accepted D20033: Update documentation for MFA, including administrator guidance.
Jan 26 2019, 7:15 PM
amckinley accepted D20032: Expand outbound mailer documentation to mention SMS and include Twilio.
Jan 26 2019, 7:00 PM
amckinley accepted D20031: Allow MFA providers to be deprecated or disabled.
Jan 26 2019, 6:53 PM

Jan 24 2019

amckinley accepted D20029: Fix bad "$this" references in "Must Encrypt" mail after MailEngine changes.
Jan 24 2019, 11:04 PM
amckinley accepted D20028: Add CSRF to SMS challenges, and pave the way for more MFA types (including Duo).
Jan 24 2019, 11:03 PM
amckinley accepted D20027: Make the "PHP 7" setup warning more explicit about what it means.

TIL.

Jan 24 2019, 7:12 PM
amckinley accepted D20026: Add a Duo API future.
Jan 24 2019, 7:08 PM