[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gentoo-project
Subject:    Re: [gentoo-project] Upcoming Council meeting on August 23rd, 1900 UTC
From:       "Paweł Hajdan, Jr." <phajdan.jr () gentoo ! org>
Date:       2010-08-12 14:11:28
Message-ID: 4C640110.1000403 () gentoo ! org
[Download RAW message or body]


Council, I withdraw my suggestion to discuss security team's status
during the Council's meeting.

On 8/12/10 12:38 AM, Alex Legler wrote:
> Please don't assume things. I'm working with someone interested in
> joining the team right now.
> We're about to schedule a meeting to address the lead thing.
> You dind't ask for 'plans to solve the main problems'. You asked if you=

> could help, and that question was answered.

The impression I got was "we don't have time to really train you, and
it's not going to improve soon". Otherwise I would expect a message more
like "we don't have time to train you now, but we're working hard on
fixing things, so watch security@g.o now, and after 6 months we will be
ready to train you properly".

I'm not going to quote private e-mails here, but I searched back my
inbox and re-read yours and Tobias' replies to make sure the above is
accurate.

Also, I volunteered to help with writing advisories for
www-client/chromium (the question about CVEs has been forwarded
upstream), I mean the entire advisory. I got no response.

So I admit I assumed too much here, and I'm sorry it sounded like trying
to fight (this is not my intention; see beginning of this post).

I'd like to suggest a better visibility of the project. Security is an
important part of Gentoo, so you can expect people outside of the
project being concerned by what they see. When you work hard at fixing
the long-term problems, please post somewhere that you do (or maybe I
just missed such post earlier).

Pawe=C5=82


["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]