Test Wiki:Community portal: Difference between revisions
From Test Wiki
Content deleted Content added
Zippybonzo (talk | contribs) →Require 2FA for highly privileged groups: new section |
Zippybonzo (talk | contribs) |
||
Line 230: | Line 230: | ||
:I don't see why we would unblock sockpuppets, but keeping the main unblocked seems fine. [[User:Zippybonzo|Zippybonzo]] ([[User talk:Zippybonzo|talk]]) 12:38, 29 October 2024 (UTC) |
:I don't see why we would unblock sockpuppets, but keeping the main unblocked seems fine. [[User:Zippybonzo|Zippybonzo]] ([[User talk:Zippybonzo|talk]]) 12:38, 29 October 2024 (UTC) |
||
== |
==Require 2FA for highly privileged groups== |
||
I'm proposing that we should require 2FA for Interface Admin, Steward and Sysadmin group members as security precautions, as IAs can edit pages that would allow them privilege escalation, and stewards/sysadmins can give such permissions out which could cause issues if their accounts were compromised. Additionally, I think bots with admin/iadmin perms should have 2FA required as they are probably less monitored security wise. [[User:Zippybonzo|Zippybonzo]] ([[User talk:Zippybonzo|talk]]) 10:44, 12 November 2024 (UTC) |
I'm proposing that we should require 2FA for Interface Admin, Steward and Sysadmin group members as security precautions, as IAs can edit pages that would allow them privilege escalation, and stewards/sysadmins can give such permissions out which could cause issues if their accounts were compromised. Additionally, I think bots with admin/iadmin perms should have 2FA required as they are probably less monitored security wise. [[User:Zippybonzo|Zippybonzo]] ([[User talk:Zippybonzo|talk]]) 10:44, 12 November 2024 (UTC) |
||
:& it should probably be required for AFAs [[User:Zippybonzo|Zippybonzo]] ([[User talk:Zippybonzo|talk]]) 10:46, 12 November 2024 (UTC) |