Cant tell if I did reply all on my reply. No need meeting for srt we caught up offline.
-----Original Message-----
From: Major Hayden [major@xxxxxxxx]
Received: Tuesday, 08 Apr 2014, 2:34PM
To: security@xxxxxxxxxxxxxxxxxxxxxxx
Subject: Re: Developing a security Bat Signal?
-----Original Message-----
From: Major Hayden [major@xxxxxxxx]
Received: Tuesday, 08 Apr 2014, 2:34PM
To: security@xxxxxxxxxxxxxxxxxxxxxxx
Subject: Re: Developing a security Bat Signal?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 4/8/14, 8:11, Matthew Miller wrote:
> Maybe we need to have some sort of (opt-in) Fedora Bat Signal for
> extra-critical and urgent security issues in core packages. We
> would promise not to use it unless the internet were actually on
> fire, as it appears to be in this case, and then have (escrowed
> somewhere?) private 24/7 contact information (phone numbers, SMS).
>
> What do you think? Anyone interested in developing this idea
> further?
This is a great idea and would really be valuable in the types of
situations we had yesterday. I ended up jumping on Twitter/G+ to
spread the news about package updates. Having a team dedicated to the
fixing and the communications would help keep people better informed.
With that said, I'd be glad to help. I'm sure we can come up with
some technologies and processes relatively quickly. Something as
simple as a call to join #fedora-eoc (emergency operations center)
might be a good stopgap.
- --
Major Hayden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJTQ/riAAoJEONAdDQ9I/mwW4cH/RRJLeDHGJ0/nVHmUreMQqwO
PGYdArNk9Tz5H/+RCP20wre2WpbS3CpJBp+kvwxpPCsgBb0Z2y234y8eGRr8Gxs3
Oe7K6oVK0VdzQPbHGrFwb5SBip8EuJwXr4TfD+WIBQL1tO2w1joLu95vZyxF+jn5
dsOCoylCKhTWJmmCpBlbxnN362OHsTaMXm4fxmbAQuxfJpx0kGhaltZ+L3NnEbAB
TmGp57y7yfi/TLOaEHFdC0ArxyT7n1FMZtYr0CCRII4DHo1n0Yxp8uEq4/WUeagS
TM1CtwrKBHmQpq1uba/+DlVEXnxlYGIavjObofBfV1Drpsr6uDmMuKedfIP3Ql0=
=v/EV
-----END PGP SIGNATURE-----
--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security
Hash: SHA1
On 4/8/14, 8:11, Matthew Miller wrote:
> Maybe we need to have some sort of (opt-in) Fedora Bat Signal for
> extra-critical and urgent security issues in core packages. We
> would promise not to use it unless the internet were actually on
> fire, as it appears to be in this case, and then have (escrowed
> somewhere?) private 24/7 contact information (phone numbers, SMS).
>
> What do you think? Anyone interested in developing this idea
> further?
This is a great idea and would really be valuable in the types of
situations we had yesterday. I ended up jumping on Twitter/G+ to
spread the news about package updates. Having a team dedicated to the
fixing and the communications would help keep people better informed.
With that said, I'd be glad to help. I'm sure we can come up with
some technologies and processes relatively quickly. Something as
simple as a call to join #fedora-eoc (emergency operations center)
might be a good stopgap.
- --
Major Hayden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
iQEcBAEBAgAGBQJTQ/riAAoJEONAdDQ9I/mwW4cH/RRJLeDHGJ0/nVHmUreMQqwO
PGYdArNk9Tz5H/+RCP20wre2WpbS3CpJBp+kvwxpPCsgBb0Z2y234y8eGRr8Gxs3
Oe7K6oVK0VdzQPbHGrFwb5SBip8EuJwXr4TfD+WIBQL1tO2w1joLu95vZyxF+jn5
dsOCoylCKhTWJmmCpBlbxnN362OHsTaMXm4fxmbAQuxfJpx0kGhaltZ+L3NnEbAB
TmGp57y7yfi/TLOaEHFdC0ArxyT7n1FMZtYr0CCRII4DHo1n0Yxp8uEq4/WUeagS
TM1CtwrKBHmQpq1uba/+DlVEXnxlYGIavjObofBfV1Drpsr6uDmMuKedfIP3Ql0=
=v/EV
-----END PGP SIGNATURE-----
--
security mailing list
security@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/security
-- security mailing list security@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/security
