Recent Posts

Discovering and fixing CVE-2021-33038 in Mailman3

During Wikimedia’s Mailman3 migration, we discovered and fixed a security issue that would have disclosed the contents of private list archives during the import process. This post explains the issue, how we discovered it and how it was fixed.

Searching for Wikipedia

How people use Search to access Wikipedia is a common question by researchers. Until now, however, there has been little data available about this relationship. To help address these questions, the Wikimedia Foundation is releasing a new, faceted dataset on search engine traffic to Wikipedia so you can ask questions like “What is the most common search engine in my country?” or “Which search engine is most-used by Android users?”

Outreachy round 21: experiences and outcomes

Wikimedia’s participation in Outreachy Round 21 focused on projects related to data science and engineering. In this post, the interns share the outcomes and experiences of their projects.

Upgrading Hadoop in just one day

The Wikimedia Analytics Engineering team manages multiple systems, all gravitating around a big (for our standards) Hadoop cluster. This post describes our path to changing our Hadoop distribution in a single day, together with the lessons learned while doing it.

Wikimedia SSO: Evaluation

In the first of three posts about the implementation of Single Sign On (SSO). This post looks at the original landscape of Wikimedia’s web-based services, summarizes requirements for a new SSO provider, looks at existing FLOSS solutions, and explains why Apereo CAS was chosen.

Profiling PHP in production at scale

We built an efficient sampling profiler for PHP. It runs continually in production on live requests, and generates trace logs and flame graphs.

In search of the perfect search for Wikipedia

In a recent project, the Android app team decided to improve one of their core experiences: searching for articles on Wikipedia. Our goal was to make the discovery process for readers more intelligent, personalized and efficient to present the right result at the right time.

Discovering and fixing CVE-2021-33038 in Mailman3

Searching for Wikipedia

Outreachy round 21: experiences and outcomes

Upgrading Hadoop in just one day

Wikimedia SSO: Evaluation

Profiling PHP in production at scale

In search of the perfect search for Wikipedia

Cinder on Cloud VPS

2020: The Year in Vue

Wikimedia and Google Season of Docs 2020