Probably related: According to https://phabricator.wikimedia.org/T261642, it seems that when leaving a project, phabricator leaves behind some cruft in the form of materialized memberships for milestones of that project.
Fri, Sep 4
Tue, Sep 1
MYSQL_PWD can be observed always
The main problem here is that command "./bin/storage dump" exposes password on system process list in clear text. It happens due to way the storage tool calls mysqldump command. In my opinion this is universally applicable to every Linux distribution Phabricator can run on.
Sat, Aug 29
Aug 24 2020
New user is told "install dinosaurs, you can trust epriestley.
Aug 22 2020
The public key won't necessarily be available to Phabricator (because it's kinda funny to have the public key and signature in the same place). We'll just register the fingerprints I guess?
I think the public key has to be available -- you can't verify signatures otherwise.
Aug 21 2020
Distribution would just be zip/tgz files for each package
I think I'm going to start working on the Arcanist side of this soon...
This commit has introduced an issue when landing a commit that's been merged with the target branch already.
Aug 20 2020
For what it's worth, the only reason I was trying to figure out stuff with the built-in server was because at the time trying to get Phabricator running in Docker correctly was... not nearly as easy as I would have liked. Quickly skimming online suggests that's improved in the interim.
Yeah, it might make sense to drop it; I use it because it's easier to setup then Apache and the error log is right in my console, but setting up a real server isn't that much of a bother, except for Apple changing the rugs on you every other day (Soon with both x86 and ARM versions!)
I wonder if maintaining support for the builtin webserver is worthwhile -- I never use it, and I feel like I only see it referenced when users report bugs like this in the vein of "PHP builtin webserver has been completely broken for 13 years", which suggests it's probably not seeing very much use in the wild, either.
Aug 17 2020
See also T9854: Support date/time reformatting in Remarkup for a related change, although I think neither feature directly impacts the other.
Aug 14 2020
Aug 13 2020
I think every other AWS interaction already uses v4, since D14978 (January 2016).
Aug 12 2020
Mostly for my own notes:
Internally, see also PHI1785.
The root cause is a bug in SSHD which was fixed in January 2017, see T11827.