Hilarious security theater, My god, the dumb, it burns... Options

[Vigilant]

From here:
Security theater

"By this time, I think every arbitrator has wiped their hard drives and reinstalled their systems (or if they haven't, they should have, Jehochman is right that even top-of-the-line security software can miss things), so even a thorough forensic inspection of everyone's computer would be pointless."

Risker is so wrong on this, it's barely believable.

What has happened is that, if the leaker is a current ARBCOM member, they have buried all evidence (and even the possibility discussion) of of whomever was the real leaker.

"Oh no, I formatted my drive as Risker reccomended! No need to look here..."

One would think, that a group whose only product/project is an online database on a set of clustered servers would have true security professionals on staff before letting community volunteers have access, apparently unrestricted, to sensitive personal data.

Look at Sony, who was lax with hard security, and the extreme beatings that were administered in the press and blogs for their failure to safeguard customer data.

Shameful wikimedia foundation, just shameful.

[Zoloft]

I will quote Will BeBack here without further comment:

Wikipedia Review Tarpit

There may be another "confidential" archive containing personal or derogatory information about Wikipedia editors: the Wikipedia Review Tarpit, the 300 Club, and other confidential areas. It could be a problem waiting to happen, and one which would affect many of the same people as has the ArbCom leak. Perhaps people with accounts in both places who are concerned about respecting the privacy and human dignity of others could make similar efforts there. For example, it'd be helpful if admins there make sure that there isn't excessively personal information about editors in the confidential archives. Will Beback 02:24, 5 July 2011 (UTC)

[EricBarbour]

There may be another "confidential" archive containing personal or derogatory information about Wikipedia editors: the Wikipedia Review Tarpit, the 300 Club, and other confidential areas. It could be a problem waiting to happen, and one which would affect many of the same people as has the ArbCom leak. Perhaps people with accounts in both places who are concerned about respecting the privacy and human dignity of others could make similar efforts there. For example, it'd be helpful if admins there make sure that there isn't excessively personal information about editors in the confidential archives. Will Beback 02:24, 5 July 2011 (UTC)

Yes, there is another confidential area, Mr. McWhiney.

Wouldn't you like to know what's going on in there, Mr. McWhiney.

Since when have you ever given a damn about "human dignity", Mr. McWhiney?

[Herschelkrustofsky]

There may be another "confidential" archive containing personal or derogatory information about Wikipedia editors: the Wikipedia Review Tarpit, the 300 Club, and other confidential areas. It could be a problem waiting to happen, and one which would affect many of the same people as has the ArbCom leak. Perhaps people with accounts in both places who are concerned about respecting the privacy and human dignity of others could make similar efforts there. For example, it'd be helpful if admins there make sure that there isn't excessively personal information about editors in the confidential archives. Will Beback 02:24, 5 July 2011 (UTC)

Yes, there is another confidential area, Mr. McWhiney.

Wouldn't you like to know what's going on in there, Mr. McWhiney.

Since when have you ever given a damn about "human dignity", Mr. McWhiney?

A more interesting question might be how Mr. McWhiney knows about the 300 Club. The simplest answer would be that he has an account here with over 300 posts. Or a buddy that does.

[SpiderAndWeb]

Is it *that* hard to pull up the server logs and check which arbitrator username/password was used to pull the mailing list archives??

[the fieryangel]

Is it *that* hard to pull up the server logs and check which arbitrator username/password was used to pull the mailing list archives??

Apparently, yes.

Unbelievable as it may seem, they ARE as incompetent as we had imagined...