RE: Developing a security Bat Signal?

Mark Cox mjc at redhat.com
Tue Apr 8 14:12:35 UTC 2014


Hmm ignore that, touchdown replied to wrong message sigh. Mark


-----Original Message-----
From: Mark Cox [mjc at redhat.com]
Received: Tuesday, 08 Apr 2014, 2:57PM
To: security at lists.fedoraproject.org, major at mhtx.net
Subject: RE: Developing a security Bat Signal?

Cant tell if I did reply all on my reply.   No need meeting for srt we caught up offline.


-----Original Message-----
From: Major Hayden [major at mhtx.net]
Received: Tuesday, 08 Apr 2014, 2:34PM
To: security at lists.fedoraproject.org
Subject: Re: Developing a security Bat Signal?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 4/8/14, 8:11, Matthew Miller wrote:
> Maybe we need to have some sort of (opt-in) Fedora Bat Signal for 
> extra-critical and urgent security issues in core packages. We
> would promise not to use it unless the internet were actually on
> fire, as it appears to be in this case, and then have (escrowed
> somewhere?) private 24/7 contact information (phone numbers, SMS).
> 
> What do you think? Anyone interested in developing this idea
> further?

This is a great idea and would really be valuable in the types of
situations we had yesterday.  I ended up jumping on Twitter/G+ to
spread the news about package updates.  Having a team dedicated to the
fixing and the communications would help keep people better informed.

With that said, I'd be glad to help.  I'm sure we can come up with
some technologies and processes relatively quickly.  Something as
simple as a call to join #fedora-eoc (emergency operations center)
might be a good stopgap.

- --
Major Hayden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJTQ/riAAoJEONAdDQ9I/mwW4cH/RRJLeDHGJ0/nVHmUreMQqwO
PGYdArNk9Tz5H/+RCP20wre2WpbS3CpJBp+kvwxpPCsgBb0Z2y234y8eGRr8Gxs3
Oe7K6oVK0VdzQPbHGrFwb5SBip8EuJwXr4TfD+WIBQL1tO2w1joLu95vZyxF+jn5
dsOCoylCKhTWJmmCpBlbxnN362OHsTaMXm4fxmbAQuxfJpx0kGhaltZ+L3NnEbAB
TmGp57y7yfi/TLOaEHFdC0ArxyT7n1FMZtYr0CCRII4DHo1n0Yxp8uEq4/WUeagS
TM1CtwrKBHmQpq1uba/+DlVEXnxlYGIavjObofBfV1Drpsr6uDmMuKedfIP3Ql0=
=v/EV
-----END PGP SIGNATURE-----
--
security mailing list
security at lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/security
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/security/attachments/20140408/49287731/attachment-0001.html>
-------------- next part --------------
--
security mailing list
security at lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/security


More information about the security mailing list