ToDo for Kicksecure Wiki Devs

From Kicksecure
< Dev
Jump to navigation Jump to search
Design Previous page: Dev/CSS Index page: Design Next page: Dev/wiki ToDo for Kicksecure Wiki Devs

Website Enhancements Planning

TODO: ADMIN - SOON[edit]

TODO: ADMIN - DELAYED[edit]

Small images super resistant cache problem[edit]

  • Dev noticed that especially with small images it's hard to really clear them on their file wiki page after a new version has been uploaded
  • Even clear cache minimal from the admin panel does not work. Clear cache cookie is active, nocache setting in the browser dev tools network setting. Still the old file is shown in the preview and the "original file" link, not the new file
  • Note: On larger images this issue does not seem to happen so much. The images are mostly updated if browser cache is not active
  • Note: The "query trick" was also tried, like https://www.kicksecure.com/wiki/File:Bootloader-pass.png?ab=carchive.org iconarchive.today icon, but did not work
  • Especially on this page File:Bootloader-pass.png it is clearly visible that the new version is different from the version in the preview
  • Task for admin: What can we do to either automatically or manually refresh?

archivebox[edit]

https://archivebox.io/#quickstartarchive.org iconarchive.today icon

illustrative images creation[edit]

Implementation probably needs discussion.

  • Hiding your identity is harder than just hiding your IP.
  • You can't be anonymous without being secure.
  • your Whonix with Tor versus your IP without Whonix
  • route randomization
  • Ask yourself - privacy by design / privacy by policy
  • freedom / freedom security / security
  • why security matters
  • why anonymity matters

DEV

  • It was agreed upon with admin that these tasks need a media / posting strategy first
  • So this task is delayed until admin has such a strategy

new thank you donation message[edit]

1) CORS issues are fixed now? (Patrick attempted to fix these.)

2) explain Patrick how to draft a HTML e-mail with text-only fallback in Thunderbird

3) Possible to have a plaintext fallback if HTML is disabled by the e-mail client?

4) e-mail for

  • Kicksecure
  • Whonix

5) bug?

This page is in Quirks Mode. Page layout may be impacted. For Standards Mode use “<!DOCTYPE html>”.

https://developer.mozilla.org/docs/Web/HTML/Quirks_Mode_and_Standards_Modearchive.org iconarchive.today icon

Valid HTML better / good idea for best e-mail reader compatibility?

DEV

  1. How can I check CORS issues?
  2. In thunderbird multipart email can be accomplished by going to "Options > Sending Format" and choose "Both HTML and Plain Text"
    1. This Sending Format however only seems to take effect if the mail is truly sent. So saving it as a draft and then "saving as" .eml does work but does not create a multipart email
    2. So maybe admin should send the email to his own email address and then save the .eml file
    3. However this eml file needs to be modified for each recipient, so there needs to be more work done
    4. Maybe another mail software needs to be involved
  3. The plaintext fallback is exactly what we want to accomplish with multipart
  4. What is meant with task 4?
  5. Maybe live discussion is needed

Patrick:

send HTML Content-Type: multipart/alternative; boundary= message

cat filename.txt | sendmail -i test@test.com

MultiWiki: delete deleted files[edit]

DEV

  • I suggest upgrading mw-multi-wiki
  • Currently it is the case that files which are deleted are not updated during mw-multi-wiki deploy
  • This means that a dev would have to delete the other files manually and keep track somewhere which files to delete later
  • This is a problem because sometimes files should not be deleted before everything is finished and admin has approved development. And it also cannot be deleted before because then the wiki which is not updated yet would not function anymore
  • So I suggest admin upgrades the mw-multi-wiki script and checks for formerly Category:MultiWiki files that are now deleted and delete them too
  • Or maybe find another solution

Patrick:

  • How mw-multi-wiki could detect deleted files from Category:MwDeleteMe?
  • A) mw-multi-wiki could be stateful and "remember" which pages were ever in mw-multi-wiki but that's ugly because then an idempotent, clean script would be dependent on remembering the state in some state file. The state would be difficult to share among developers.
  • B) A Category:MwDeleteMe could be invented. Delete all contents from the page and add that Category. Then mw-multi-wiki could remove it first from slave and eventually form the master wiki. Also non-ideal because not an intuitive process as it requires the developer to remember this because it's not a simple as using as using the wiki's internal deletion feature.
  • C) Deletion log https://www.kicksecure.com/wiki/Special:Log/deletearchive.org iconarchive.today icon doesn't contain categories.
    • Parsing the deleted revision for Category:MultiWiki might be error prone (if a wiki page was MultiWiki in the past but then it was only a comment).

status:

Patrick asked on the MediaWiki mailing list. https://lists.wikimedia.org/hyperkitty/list/mediawiki-l@lists.wikimedia.org/thread/DIREH7YFVQPYHIJFFUXNBE6PVJ6OSMUX/archive.org iconarchive.today icon

new idea: diff the categories in the different wikis

report only

MultiWiki: Think about PHP files[edit]

  • For the workflow it would be good to not only deploy the js and css files to the "slave" wikis, but also the php-scripts for combined and headscript content
  • Pro: if there are more than 2 wikis (which are not at the moment) then it's way easier to manage
  • Con: At the moment it's not necessary. And we would need to be very careful with who gets the rights

Stage Server as Master[edit]

  • MultiWiki feature requests:
    • The idea is the separate MultiWiki files into "code" (js, css files) and "content" (content pages)
    • pull code (CSS, JS, widgets) from Kicksecure stage server
      • How about templates such as Template:Header?
        • These need to be in a special category to be recognized as code?
  • stage server feature request:
    • The stage server becomes the master server for code files. That way new scripts can be developed and tested on the stage server without disrupting the normal production use of the public wikis. Once a new feature is ready it can be multiwiki deployed from the stage server (master) to the slave wikis
  • For content pages the Kicksecure wiki might still be the master however

check this stuff[edit]

Server forcing browser cache clear methods[edit]

DEV

page protection[edit]

  • Would it be possible / sensible to add "Dev only" pages? Anon-user should in general not be able to edit those pages at all for security reasons.
  • All multi wiki and some more pages like payment should be added to this category
    • All multi wiki: No. Some are simple content pages (such as Template:Open_File) which are already sufficiently protected by the flagged revisions wiki extension.
    • Some security critical pages may indeed need write protection.
    • Please look through security critical pages and protect them. If it is a massive amount, please instead just share a list of them privately so this can be done via mediawiki-shell API. Link format does not matter.
https://www.kicksecure.com/wiki/Dev/website
https://www.kicksecure.com/wiki/Dev/todo

or 

Dev/website
Dev/todo
  • Could also consider: add category protect and then one day auto protect these via API.

DEV

  • Dev suggests adding the following pages, because they are functional. Following the rationale of admin content pages are not to be extra protected (apart from the automatic flagged revisions). Rule of thumbs
  • If a template accepts parameters it's likely to be protected
  • Also templates are to be protected which are content but
    • purely functional or
    • administrative or
    • where it's uper unlikely a normal user could be reasonably assumed to have sensible input for changes.
  • Dev would leave it to admin to decide when to protect these pages. Threat level is not high due to flagged revisions. It's just that these pages are super unlikely to "benefit" from anon intervention. So it makes sense to protect them just to save unnecessary work (meaning: looking through anon page edits which should not be edited anyways)
Template:Admins
Template:AdvancedUsersOnly
Template:Anchor
Template:Anchor_link
Template:Apt_key_add
Template:Archived
Badtitle
Template:Box
Template:Bugs_Issues_Troubleshooting_mininav
Template:ClearLine
Template:Cli
Template:Clickable_button
Widget:CodeSelect
Template:CodeSelect
Template:Collapsible
MediaWiki:Common.css
MediaWiki:Common.js
Template:Community_Support
Template:Contact_icon_bullet_list
Template:ContentImage
Template:Contribute_mininav
Template:Contributor
Template:Curl_Secure
Template:Curl_Secure_Download
Template:CustomRepo
Template:Default_Passwords
Template:Developers-only
Template:Do_not_continue_on_gpg_verification_errors
Template:Donate_Legal_Disclaimer
Donate/Affiliate_Link
Donate/AUD
Donate/Bank_Wire
Donate/Bitcoin
Donate/Credit_Card
Donate/Crypto
Donate/Ethereum
Donate/EUR
Donate/GBP
Donate/Monero
Donate/PayPal
Donate/Tax-Deductible
Donate/USD
Template:Donation_appeal_download
Template:Donation_mininav
Widget:Donation_Panel
Template:DonorCard
Widget:Download_Button
Template:Download_image_and_signature
Template:DownloadTableUnified
Template:Draft
Widget:EagerImage
Template:ETA
Widget:Expand_or_Collapse_All
Template:Expand_or_Collapse_All
Template:ExtLink
Widget:ExtLink
Template:Flatpak_add_repository_short
Widget:FlyInNotification
Template:FlyInNotification
Widget:Footer
Template:Free
Widget:Free
Widget:Freedom
Template:Get_Signing_Key
Template:GnuPG_file_names
Template:GoogleOff
Template:Gui
Template:Header
Widget:Header
Widget:Headline
Template:Headline
Template:Hide_all_banners
Template:Hsversion
Widget:HtmlComment
Template:Icon
Widget:Icon_Bullet_List
Template:IconSet
Template:Intro
Template:IntroLike
Template:Javascript-looks-better-with-javascript
Widget:LeftRightImageText
Template:LeftRightImageText
Template:License_name
Template:Mbox
Template:Mirror
MediaWiki:Mobile.js
Template:Mod
Template:Name
Template:Name-address
Template:Name-city
Template:Name-company-registration
Template:Name-country
Template:Name-email
Template:Name-short
Template:Name-zip
Template:Navi_project_install_options
Template:Newline
Widget:Non-freedom
Template:Non-freedom
Template:Non-freedom-software
Template:Nowrap
Template:Os
Template:Pay_by_PayPal_Subscription
Widget:Pay_by_PayPal_Subscription
Template:Payments
Template:Policy_mininav
Template:PreBox
Premium_Support
Template:PreventEnhanceHeadlines
Template:Privacy_Policy_Specific
Template:Privacypolicy/Left
Template:Privacypolicy/Right
Template:Project_age_years
Template:Project_License
Template:Qubes_AppArmor
Template:Quotation
Template:Random_number
Template:Release_mininav
Template:Responsive_Thumbnails
Template:Selfsupport_mininav
Template:ShareTooltip
Template:Signing_key_kvm
Template:Signing_key_kvm_signify
Template:Signing_key_main
Template:Signing_key_main_download_command_line
Template:Signing_key_main_signify
MediaWiki:Sitenotice EndOfYear.css
Template:SitenoticeBanner
MediaWiki:Spam-whitelist
Template:Stable
Template:Stable_project_version_based_on_Debian_testing_codename
Template:Stub

TODO DEV[edit]

Tab Controller versus Images[edit]

direct use of SVG images functional[edit]

[[File:Kicksecure-logo-rectangle.svg can be used directly. Nice but unexpected since this was previously broken and hence Template:SVG was implemented.

Kicksecure

test

SVG Template Broken[edit]

Was broken. Now functional.

SVG image of Kicksecure logo rectangle

Kicksecure

test

dev wiki page notice[edit]

content improvements[edit]

add tab controller[edit]

Browser wiki page[edit]

  • Browser
  • goal: explain why no browser is (will be) installed by default in Kicksecure
  • should be understandable by laymen
  • please improve content and design

GitHub Link Template[edit]

DEV

  • Done
  • Please read documentation Github_link Template and check out the tests Github_link Template
  • Especially check if the quality of life ideas of Dev are satisfactory
  • NOTE: This template is based on Template:ExtLink. This is set to |icons=none because no archive option seemed plausible for Dev

Patrick:

  • please add a small github icon
  • please port Kicksecure, Whonix to use this new template

Whonix USB_Installation - illustrative image[edit]

Select your platform[edit]

  • search (using Search and Replace extension) for:

Select your platform.

template prettyfication[edit]

Mobile Operating System Comparison - unclickable footnotes[edit]

upstream_wiki template improvements[edit]

  • https://www.whonix.org/wiki/Template:Upstream_wikiarchive.org iconarchive.today icon
    • please see how this template is used to get an idea. Chromium is a good example.
  • users "must" really follow that link. Otherwise documentation will be incomplete.
  • keep it verbose as is
  • make the button nicer (keep onion support)
  • add a click animation?
  • other stylistic and/or content improvements

Whonix Qubes Install wiki content improvement[edit]

Whonix KVM wiki content improvement[edit]

hardware and firmware documentation[edit]

  • how to best organize the topics
  • content review
  • improvement
  • contextualization (avoid lost at hello effect)
  • Open-source_Hardware talks a lot about Intel ME but that's not Open Source and maybe should be moved to Out-of-band_Management_Technology, just a short mention instead

anchor_link styling[edit]

SysRq key[edit]

{{key|[[Alt key|Alt]]|[[system request|SysRq]]}}

WAITING ON[edit]

New utility script file[edit]

DEV

  • Dev introduces new _utility.php in admin files
  • 2 methods that are already used in other scripts are highly optimized and improved
  • Already used in wikibook-generate. It was pretty much needed for better output and debugging and maintainability of code
  • Could be used in other admin files too - recommended
  • In general: Just FYI

REVIEW PLEASE[edit]

wiki editor bug - buttons broken[edit]

  • how to reproduce: edit -> show preview -> press buttons (such as "code" button) -> nothing happens

DEV

  • Could not be reproduced
  • Dev opened Testpage and other pages. Edit -> show preview -> (do nothing, not even refocus into editing window) -> every custom button works

Footnotes[edit]

Design Previous page: Dev/CSS Index page: Design Next page: Dev/wiki

Notification image
Your support makes
all the difference!

We believe security software like Kicksecure needs to remain Open Source and independent. Would you help sustain and grow the project? Learn more about our 13 year success story and maybe DONATE!

Retrieved from "https://www.kicksecure.com/w/index.php?title=Dev/website&oldid=97795"