Re: Developing a security Bat Signal?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 4/8/14, 8:11, Matthew Miller wrote:
> Maybe we need to have some sort of (opt-in) Fedora Bat Signal for 
> extra-critical and urgent security issues in core packages. We
> would promise not to use it unless the internet were actually on
> fire, as it appears to be in this case, and then have (escrowed
> somewhere?) private 24/7 contact information (phone numbers, SMS).
> 
> What do you think? Anyone interested in developing this idea
> further?

This is a great idea and would really be valuable in the types of
situations we had yesterday.  I ended up jumping on Twitter/G+ to
spread the news about package updates.  Having a team dedicated to the
fixing and the communications would help keep people better informed.

With that said, I'd be glad to help.  I'm sure we can come up with
some technologies and processes relatively quickly.  Something as
simple as a call to join #fedora-eoc (emergency operations center)
might be a good stopgap.

- --
Major Hayden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTQ/riAAoJEONAdDQ9I/mwW4cH/RRJLeDHGJ0/nVHmUreMQqwO
PGYdArNk9Tz5H/+RCP20wre2WpbS3CpJBp+kvwxpPCsgBb0Z2y234y8eGRr8Gxs3
Oe7K6oVK0VdzQPbHGrFwb5SBip8EuJwXr4TfD+WIBQL1tO2w1joLu95vZyxF+jn5
dsOCoylCKhTWJmmCpBlbxnN362OHsTaMXm4fxmbAQuxfJpx0kGhaltZ+L3NnEbAB
TmGp57y7yfi/TLOaEHFdC0ArxyT7n1FMZtYr0CCRII4DHo1n0Yxp8uEq4/WUeagS
TM1CtwrKBHmQpq1uba/+DlVEXnxlYGIavjObofBfV1Drpsr6uDmMuKedfIP3Ql0=
=v/EV
-----END PGP SIGNATURE-----
--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security





[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Big List of Linux Books]     [Yosemite News]     [KDE Users]     [Coolkey]

  Powered by Linux