From predisclosure-applications-bounces@lists.xenproject.org Wed May 13 14:10:05 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 13 May 2015 14:10:05 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YsXMJ-0003Za-Rr; Wed, 13 May 2015 14:10:03 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YsXMI-0003ZM-C2 for predisclosure-applications@lists.xenproject.org; Wed, 13 May 2015 14:10:02 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id F3/70-03028-93B53555; Wed, 13 May 2015 14:10:01 +0000 X-Env-Sender: james@jump.net.uk X-Msg-Ref: server-6.tower-31.messagelabs.com!1431526200!10646796!1 X-Originating-IP: [212.13.202.84] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.14; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18763 invoked from network); 13 May 2015 14:10:00 -0000 Received: from outmail.jump.org.uk (HELO outmail.jump.org.uk) (212.13.202.84) by server-6.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 13 May 2015 14:10:00 -0000 Received: from gw.jump.net.uk ([212.13.203.62]:64436 helo=[192.168.147.20]) by jump.org.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1) (envelope-from ) id 1YsXM2-0007jC-4S for predisclosure-applications@lists.xenproject.org; Wed, 13 May 2015 15:09:47 +0100 From: "James A. T. Rice" Message-Id: Date: Wed, 13 May 2015 15:09:54 +0100 To: predisclosure-applications@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) X-Mailer: Apple Mail (2.1878.6) X-Jump-Spam-Score: -1.0 (-) X-Jump-Spam-Report: The result of the Jump Networks jury (spamassassin) on "spamd" is Content analysis details: (-1.0 points, 4.4 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain Subject: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============9000118076869964818==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============9000118076869964818== Content-Type: multipart/signed; boundary="Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, I'm from Jump Networks Ltd, we offer VPS services using Xen to customers = as per http://www.jump.net.uk/vps , so believe we fit the criteria for = inclusion to the predisclosure list. Invitation to report security = issues to us is at http://www.jump.net.uk/contact . Your policy and = terms for inclusion onto the list has been read and accepted. We'd like = jump-admins@jump.net.uk to be added to the list. Thanks James Rice Director Jump Networks Ltd --Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVU1syAAoJEGkXpK11ewjCFpIP+weCTkgsd7xCRzeX5JCBl2Yx 4dwRBVGL1UTauQyyvciIL7vJh/pEnDWCMF28yBia6ZBdT5hOvwyfbRnNTH7Yw9Ie dcB6k/dUmRvICRBTTvVbDFxCSGhhabZY40sofs29axZTZLUmtbP4PxBGT+Kqq7TZ D1V13GHHFY8WNTvUuzIxQO9lb2LSe5N/ApAgZt0WWae8+C6OQ5tnaYfNQsmoVGdH d/3jxfyb0byV1S4KUJ8muxIF3BMQg9fxskzbL4UAqBo4EzZg+BYgCuJzEUUwgCGa SlO14j/M2Ir7r/Rzh1Va613eND107iN6r1Z4tVAZnqd66QjeHvx1tJTr/LOiSNSj lbLSyLyJn7mFKSDKvek5Ulmn8f4+oZ1m27VXLPCctCFZcqZLAhlAUINyhOF6MwDp uYtMQGPjZ5xOn5RhUQPFyTnOOiJvMxv0tv6zDHTXNuToLm8KC0kbHAQd6fFJUVox nVlvsdRr9auCsSQUJSxNA8Y7Gea+MULZEnhburg9nYDGtXyTjZ55ri81lVzWNvm6 tirQVqoaHJ2cS3q9dyagEECjIZsrsXP1EQHPRRmNEV/mFxvAVzEHfCLLz3mbmAxC kiAU2Ux+rlMKeGq57j41LS2LmpFZmGl+dK55qAu5NA7r3lFrtylba/8PvpkxW8Pe g00qWFVe0Oh4ebxQLJiT =fyOc -----END PGP SIGNATURE----- --Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898-- --===============9000118076869964818== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============9000118076869964818==-- From predisclosure-applications-bounces@lists.xenproject.org Wed May 13 14:10:05 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 13 May 2015 14:10:05 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YsXMJ-0003Za-Rr; Wed, 13 May 2015 14:10:03 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YsXMI-0003ZM-C2 for predisclosure-applications@lists.xenproject.org; Wed, 13 May 2015 14:10:02 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id F3/70-03028-93B53555; Wed, 13 May 2015 14:10:01 +0000 X-Env-Sender: james@jump.net.uk X-Msg-Ref: server-6.tower-31.messagelabs.com!1431526200!10646796!1 X-Originating-IP: [212.13.202.84] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.14; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18763 invoked from network); 13 May 2015 14:10:00 -0000 Received: from outmail.jump.org.uk (HELO outmail.jump.org.uk) (212.13.202.84) by server-6.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 13 May 2015 14:10:00 -0000 Received: from gw.jump.net.uk ([212.13.203.62]:64436 helo=[192.168.147.20]) by jump.org.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1) (envelope-from ) id 1YsXM2-0007jC-4S for predisclosure-applications@lists.xenproject.org; Wed, 13 May 2015 15:09:47 +0100 From: "James A. T. Rice" Message-Id: Date: Wed, 13 May 2015 15:09:54 +0100 To: predisclosure-applications@lists.xenproject.org Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) X-Mailer: Apple Mail (2.1878.6) X-Jump-Spam-Score: -1.0 (-) X-Jump-Spam-Report: The result of the Jump Networks jury (spamassassin) on "spamd" is Content analysis details: (-1.0 points, 4.4 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain Subject: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============9000118076869964818==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============9000118076869964818== Content-Type: multipart/signed; boundary="Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, I'm from Jump Networks Ltd, we offer VPS services using Xen to customers = as per http://www.jump.net.uk/vps , so believe we fit the criteria for = inclusion to the predisclosure list. Invitation to report security = issues to us is at http://www.jump.net.uk/contact . Your policy and = terms for inclusion onto the list has been read and accepted. We'd like = jump-admins@jump.net.uk to be added to the list. Thanks James Rice Director Jump Networks Ltd --Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVU1syAAoJEGkXpK11ewjCFpIP+weCTkgsd7xCRzeX5JCBl2Yx 4dwRBVGL1UTauQyyvciIL7vJh/pEnDWCMF28yBia6ZBdT5hOvwyfbRnNTH7Yw9Ie dcB6k/dUmRvICRBTTvVbDFxCSGhhabZY40sofs29axZTZLUmtbP4PxBGT+Kqq7TZ D1V13GHHFY8WNTvUuzIxQO9lb2LSe5N/ApAgZt0WWae8+C6OQ5tnaYfNQsmoVGdH d/3jxfyb0byV1S4KUJ8muxIF3BMQg9fxskzbL4UAqBo4EzZg+BYgCuJzEUUwgCGa SlO14j/M2Ir7r/Rzh1Va613eND107iN6r1Z4tVAZnqd66QjeHvx1tJTr/LOiSNSj lbLSyLyJn7mFKSDKvek5Ulmn8f4+oZ1m27VXLPCctCFZcqZLAhlAUINyhOF6MwDp uYtMQGPjZ5xOn5RhUQPFyTnOOiJvMxv0tv6zDHTXNuToLm8KC0kbHAQd6fFJUVox nVlvsdRr9auCsSQUJSxNA8Y7Gea+MULZEnhburg9nYDGtXyTjZ55ri81lVzWNvm6 tirQVqoaHJ2cS3q9dyagEECjIZsrsXP1EQHPRRmNEV/mFxvAVzEHfCLLz3mbmAxC kiAU2Ux+rlMKeGq57j41LS2LmpFZmGl+dK55qAu5NA7r3lFrtylba/8PvpkxW8Pe g00qWFVe0Oh4ebxQLJiT =fyOc -----END PGP SIGNATURE----- --Apple-Mail=_80ED3018-8F1E-4E9A-A691-256C9D248898-- --===============9000118076869964818== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============9000118076869964818==-- From predisclosure-applications-bounces@lists.xenproject.org Mon May 18 11:38:01 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 18 May 2015 11:38:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuJMu-0000T7-8A; Mon, 18 May 2015 11:38:00 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuJMt-0000Sx-1S for predisclosure-applications@lists.xenproject.org; Mon, 18 May 2015 11:37:59 +0000 Received: from [85.158.137.68] by server-2.bemta-3.messagelabs.com id 07/CC-03079-234C9555; Mon, 18 May 2015 10:51:30 +0000 X-Env-Sender: james@jump.net.uk X-Msg-Ref: server-12.tower-31.messagelabs.com!1431946289!11392945!1 X-Originating-IP: [212.13.202.84] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26032 invoked from network); 18 May 2015 10:51:29 -0000 Received: from outmail.jump.org.uk (HELO outmail.jump.org.uk) (212.13.202.84) by server-12.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 18 May 2015 10:51:29 -0000 Received: from gw.jump.net.uk ([212.13.203.62]:50110 helo=[192.168.147.20]) by jump.org.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1) (envelope-from ) id 1YuIdX-0003zo-48; Mon, 18 May 2015 11:51:08 +0100 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: "James A. T. Rice" In-Reply-To: <1431941318.4944.9.camel@xen.org> Date: Mon, 18 May 2015 11:51:23 +0100 Message-Id: References: <1431941318.4944.9.camel@xen.org> To: Ian Campbell X-Mailer: Apple Mail (2.1878.6) X-Jump-Spam-Score: -2.9 (--) X-Jump-Spam-Report: The result of the Jump Networks jury (spamassassin) on "spamd" is Content analysis details: (-2.9 points, 4.4 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0961999804423356398==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============0961999804423356398== Content-Type: multipart/signed; boundary="Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Ian, Ah, jump-admins@ is Jump Networks Ltd staff, rather than admins of customers, which I see now it might have appeared to have been. There are three people on that list (myself, Nick Waterman, and Hannah Gordon-Smith). As I'm sure you've guessed, the obfuscation on the contact page is purely to dissuade spam, I fully expect spammers implement basic de-obfuscation into their crawlers, so was trying to use something slightly different to common obfuscation. Anyway, I've updated the page to a more familiar format now. Thanks James On 18 May 2015, at 10:28, Ian Campbell wrote: > Hi James, >=20 > Thank you, your application is largely fine, we have just one issue: >=20 > Please could you clarify the scope of your jump-admins@ alias. It is > intended that predisclosures go to a small team dedicated to handling > incoming security issues, rather than a large team of system > administrators. We would prefer a dedicated security@ or some such. >=20 > It doesn't affect your application but several members of the Xen > security team found your http://www.jump.net.uk/contact page unclear, = in > particular "please open a ticket with us at support , highly > confidential reports can be sent to directors .". Adding the > specific domain or perhaps some alternative formatting for the hint > towards the email address to use (e.g. some tags) might be > beneficial. >=20 > Thanks, >=20 > Ian. >=20 > On Wed, 2015-05-13 at 15:09 +0100, James A. T. Rice wrote: >> Hi, >>=20 >> I'm from Jump Networks Ltd, we offer VPS services using Xen to >> customers as per http://www.jump.net.uk/vps , so believe we fit the >> criteria for inclusion to the predisclosure list. Invitation to >> report security issues to us is at http://www.jump.net.uk/contact . >> Your policy and terms for inclusion onto the list has been read and >> accepted. We'd like jump-admins@jump.net.uk to be added to the list. >>=20 >> Thanks >> James Rice >> Director >> Jump Networks Ltd >> _______________________________________________ >> Predisclosure-applications mailing list >> Predisclosure-applications@lists.xenproject.org >> = http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applica= tions >=20 >=20 --Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVWcQsAAoJEGkXpK11ewjCN/8P/3xCLUp/QPfq1+/ZOZRqhtpR f3fA+ShTLEk3hUuQhOFXN4Er46EVDZeJdgtr7VmIewxlyX1q3UX3eePsvKsxOHec qtDQihajnFVwUtwxEfVEp98dVocUnA1iFALV3+KFn5FZttM/bp0pGwr4BqTcQiGz iIjLug3mIviM54wvQogToS+fZpvt5krKDL8ahMmoHBkfZCi9jUvADLD1u7wflFRa cNa4qRthmDB/AW9eh/aSQMDeU+J3K5pxTq4KetzVNs2YZcAtMfZdIq+azDMpBJg6 pKCeEvegAIbyGfA+NJyrlz5BGgv6wgQaBn2pwZwkzcRFvST6TVJ0il4BO9prKxa8 Tfm8kUJg4/FNUuJKg4AAVmFZQPbaOj+/Cu11wa2jRZOLiaScyZEvcngpRigWPLf8 yTBctoV971pBH22sQt6I8AIp4cNsMH2YhxQ4TJkfWiah9dzV7VVxKz4lCipfYDCp agt74cGWJqhSZb277+JC8rZeUToyr8uART539ELILUFZrY+X0eHkKpg8wvA5Radm fsx7DncTKxisyYGm0AZD2XDk/a4C3h3XIH7ELNu7dxFVrG8H8Fiffl6gV7qt1D6Q 4DtgoF7U45bWKOocnMQNl7cel6h5BdgtEwa2h6ZhTHHFSG1Coyt9Bz9ubf3oDu7u vL7dhTVv29oKJn2AvQwo =Wwag -----END PGP SIGNATURE----- --Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B-- --===============0961999804423356398== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============0961999804423356398==-- From predisclosure-applications-bounces@lists.xenproject.org Mon May 18 11:38:01 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 18 May 2015 11:38:01 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuJMu-0000T7-8A; Mon, 18 May 2015 11:38:00 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuJMt-0000Sx-1S for predisclosure-applications@lists.xenproject.org; Mon, 18 May 2015 11:37:59 +0000 Received: from [85.158.137.68] by server-2.bemta-3.messagelabs.com id 07/CC-03079-234C9555; Mon, 18 May 2015 10:51:30 +0000 X-Env-Sender: james@jump.net.uk X-Msg-Ref: server-12.tower-31.messagelabs.com!1431946289!11392945!1 X-Originating-IP: [212.13.202.84] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 26032 invoked from network); 18 May 2015 10:51:29 -0000 Received: from outmail.jump.org.uk (HELO outmail.jump.org.uk) (212.13.202.84) by server-12.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 18 May 2015 10:51:29 -0000 Received: from gw.jump.net.uk ([212.13.203.62]:50110 helo=[192.168.147.20]) by jump.org.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1) (envelope-from ) id 1YuIdX-0003zo-48; Mon, 18 May 2015 11:51:08 +0100 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: "James A. T. Rice" In-Reply-To: <1431941318.4944.9.camel@xen.org> Date: Mon, 18 May 2015 11:51:23 +0100 Message-Id: References: <1431941318.4944.9.camel@xen.org> To: Ian Campbell X-Mailer: Apple Mail (2.1878.6) X-Jump-Spam-Score: -2.9 (--) X-Jump-Spam-Report: The result of the Jump Networks jury (spamassassin) on "spamd" is Content analysis details: (-2.9 points, 4.4 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0961999804423356398==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============0961999804423356398== Content-Type: multipart/signed; boundary="Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi Ian, Ah, jump-admins@ is Jump Networks Ltd staff, rather than admins of customers, which I see now it might have appeared to have been. There are three people on that list (myself, Nick Waterman, and Hannah Gordon-Smith). As I'm sure you've guessed, the obfuscation on the contact page is purely to dissuade spam, I fully expect spammers implement basic de-obfuscation into their crawlers, so was trying to use something slightly different to common obfuscation. Anyway, I've updated the page to a more familiar format now. Thanks James On 18 May 2015, at 10:28, Ian Campbell wrote: > Hi James, >=20 > Thank you, your application is largely fine, we have just one issue: >=20 > Please could you clarify the scope of your jump-admins@ alias. It is > intended that predisclosures go to a small team dedicated to handling > incoming security issues, rather than a large team of system > administrators. We would prefer a dedicated security@ or some such. >=20 > It doesn't affect your application but several members of the Xen > security team found your http://www.jump.net.uk/contact page unclear, = in > particular "please open a ticket with us at support , highly > confidential reports can be sent to directors .". Adding the > specific domain or perhaps some alternative formatting for the hint > towards the email address to use (e.g. some tags) might be > beneficial. >=20 > Thanks, >=20 > Ian. >=20 > On Wed, 2015-05-13 at 15:09 +0100, James A. T. Rice wrote: >> Hi, >>=20 >> I'm from Jump Networks Ltd, we offer VPS services using Xen to >> customers as per http://www.jump.net.uk/vps , so believe we fit the >> criteria for inclusion to the predisclosure list. Invitation to >> report security issues to us is at http://www.jump.net.uk/contact . >> Your policy and terms for inclusion onto the list has been read and >> accepted. We'd like jump-admins@jump.net.uk to be added to the list. >>=20 >> Thanks >> James Rice >> Director >> Jump Networks Ltd >> _______________________________________________ >> Predisclosure-applications mailing list >> Predisclosure-applications@lists.xenproject.org >> = http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applica= tions >=20 >=20 --Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVWcQsAAoJEGkXpK11ewjCN/8P/3xCLUp/QPfq1+/ZOZRqhtpR f3fA+ShTLEk3hUuQhOFXN4Er46EVDZeJdgtr7VmIewxlyX1q3UX3eePsvKsxOHec qtDQihajnFVwUtwxEfVEp98dVocUnA1iFALV3+KFn5FZttM/bp0pGwr4BqTcQiGz iIjLug3mIviM54wvQogToS+fZpvt5krKDL8ahMmoHBkfZCi9jUvADLD1u7wflFRa cNa4qRthmDB/AW9eh/aSQMDeU+J3K5pxTq4KetzVNs2YZcAtMfZdIq+azDMpBJg6 pKCeEvegAIbyGfA+NJyrlz5BGgv6wgQaBn2pwZwkzcRFvST6TVJ0il4BO9prKxa8 Tfm8kUJg4/FNUuJKg4AAVmFZQPbaOj+/Cu11wa2jRZOLiaScyZEvcngpRigWPLf8 yTBctoV971pBH22sQt6I8AIp4cNsMH2YhxQ4TJkfWiah9dzV7VVxKz4lCipfYDCp agt74cGWJqhSZb277+JC8rZeUToyr8uART539ELILUFZrY+X0eHkKpg8wvA5Radm fsx7DncTKxisyYGm0AZD2XDk/a4C3h3XIH7ELNu7dxFVrG8H8Fiffl6gV7qt1D6Q 4DtgoF7U45bWKOocnMQNl7cel6h5BdgtEwa2h6ZhTHHFSG1Coyt9Bz9ubf3oDu7u vL7dhTVv29oKJn2AvQwo =Wwag -----END PGP SIGNATURE----- --Apple-Mail=_6DCBBEC8-A970-4433-B912-E4B9F9A7A79B-- --===============0961999804423356398== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============0961999804423356398==-- From predisclosure-applications-bounces@lists.xenproject.org Mon May 18 12:56:20 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 18 May 2015 12:56:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuKah-0005Ro-7S; Mon, 18 May 2015 12:56:19 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuKag-0005RG-5e for predisclosure-applications@lists.xenproject.org; Mon, 18 May 2015 12:56:18 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id 20/DE-03026-AC0B9555; Mon, 18 May 2015 09:28:42 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-16.tower-206.messagelabs.com!1431941321!7962853!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 10820 invoked from network); 18 May 2015 09:28:42 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-16.tower-206.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 18 May 2015 09:28:42 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YuHLl-0000Fb-HO; Mon, 18 May 2015 10:28:41 +0100 Message-ID: <1431941318.4944.9.camel@xen.org> From: Ian Campbell To: "James A. T. Rice" Date: Mon, 18 May 2015 10:28:38 +0100 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi James, Thank you, your application is largely fine, we have just one issue: Please could you clarify the scope of your jump-admins@ alias. It is intended that predisclosures go to a small team dedicated to handling incoming security issues, rather than a large team of system administrators. We would prefer a dedicated security@ or some such. It doesn't affect your application but several members of the Xen security team found your http://www.jump.net.uk/contact page unclear, in particular "please open a ticket with us at support , highly confidential reports can be sent to directors .". Adding the specific domain or perhaps some alternative formatting for the hint towards the email address to use (e.g. some tags) might be beneficial. Thanks, Ian. On Wed, 2015-05-13 at 15:09 +0100, James A. T. Rice wrote: > Hi, > > I'm from Jump Networks Ltd, we offer VPS services using Xen to > customers as per http://www.jump.net.uk/vps , so believe we fit the > criteria for inclusion to the predisclosure list. Invitation to > report security issues to us is at http://www.jump.net.uk/contact . > Your policy and terms for inclusion onto the list has been read and > accepted. We'd like jump-admins@jump.net.uk to be added to the list. > > Thanks > James Rice > Director > Jump Networks Ltd > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Mon May 18 12:56:20 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 18 May 2015 12:56:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuKah-0005Ro-7S; Mon, 18 May 2015 12:56:19 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1YuKag-0005RG-5e for predisclosure-applications@lists.xenproject.org; Mon, 18 May 2015 12:56:18 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id 20/DE-03026-AC0B9555; Mon, 18 May 2015 09:28:42 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-16.tower-206.messagelabs.com!1431941321!7962853!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 10820 invoked from network); 18 May 2015 09:28:42 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-16.tower-206.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 18 May 2015 09:28:42 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1YuHLl-0000Fb-HO; Mon, 18 May 2015 10:28:41 +0100 Message-ID: <1431941318.4944.9.camel@xen.org> From: Ian Campbell To: "James A. T. Rice" Date: Mon, 18 May 2015 10:28:38 +0100 In-Reply-To: References: X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Hi James, Thank you, your application is largely fine, we have just one issue: Please could you clarify the scope of your jump-admins@ alias. It is intended that predisclosures go to a small team dedicated to handling incoming security issues, rather than a large team of system administrators. We would prefer a dedicated security@ or some such. It doesn't affect your application but several members of the Xen security team found your http://www.jump.net.uk/contact page unclear, in particular "please open a ticket with us at support , highly confidential reports can be sent to directors .". Adding the specific domain or perhaps some alternative formatting for the hint towards the email address to use (e.g. some tags) might be beneficial. Thanks, Ian. On Wed, 2015-05-13 at 15:09 +0100, James A. T. Rice wrote: > Hi, > > I'm from Jump Networks Ltd, we offer VPS services using Xen to > customers as per http://www.jump.net.uk/vps , so believe we fit the > criteria for inclusion to the predisclosure list. Invitation to > report security issues to us is at http://www.jump.net.uk/contact . > Your policy and terms for inclusion onto the list has been read and > accepted. We'd like jump-admins@jump.net.uk to be added to the list. > > Thanks > James Rice > Director > Jump Networks Ltd > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed May 20 08:51:44 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 20 May 2015 08:51:44 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yuzj5-0000t6-LW; Wed, 20 May 2015 08:51:43 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yuzj5-0000t1-1J for predisclosure-applications@lists.xenproject.org; Wed, 20 May 2015 08:51:43 +0000 Received: from [193.109.254.147] by server-1.bemta-14.messagelabs.com id CA/F9-02633-E1B4C555; Wed, 20 May 2015 08:51:42 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-16.tower-27.messagelabs.com!1432111901!11512847!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 30859 invoked from network); 20 May 2015 08:51:41 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-16.tower-27.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 20 May 2015 08:51:41 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1Yuzj2-0003Ry-Nj; Wed, 20 May 2015 09:51:40 +0100 Message-ID: <1432111899.12989.196.camel@xen.org> From: Ian Campbell To: "James A. T. Rice" Date: Wed, 20 May 2015 09:51:39 +0100 In-Reply-To: References: <1431941318.4944.9.camel@xen.org> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thanks James. I have now added jump-admins@jump.net.uk to the list and have sent out copies of 4 currently embargoed issues (XSA-128..131). Ian. On Mon, 2015-05-18 at 11:51 +0100, James A. T. Rice wrote: > Hi Ian, > > Ah, jump-admins@ is Jump Networks Ltd staff, rather than admins > of customers, which I see now it might have appeared to have been. > There are three people on that list (myself, Nick Waterman, and > Hannah Gordon-Smith). > > As I'm sure you've guessed, the obfuscation on the contact > page is purely to dissuade spam, I fully expect spammers implement > basic de-obfuscation into their crawlers, so was trying to use > something slightly different to common obfuscation. Anyway, I've > updated the page to a more familiar format now. > > Thanks > James > > On 18 May 2015, at 10:28, Ian Campbell wrote: > > > Hi James, > > > > Thank you, your application is largely fine, we have just one issue: > > > > Please could you clarify the scope of your jump-admins@ alias. It is > > intended that predisclosures go to a small team dedicated to handling > > incoming security issues, rather than a large team of system > > administrators. We would prefer a dedicated security@ or some such. > > > > It doesn't affect your application but several members of the Xen > > security team found your http://www.jump.net.uk/contact page unclear, in > > particular "please open a ticket with us at support , highly > > confidential reports can be sent to directors .". Adding the > > specific domain or perhaps some alternative formatting for the hint > > towards the email address to use (e.g. some tags) might be > > beneficial. > > > > Thanks, > > > > Ian. > > > > On Wed, 2015-05-13 at 15:09 +0100, James A. T. Rice wrote: > >> Hi, > >> > >> I'm from Jump Networks Ltd, we offer VPS services using Xen to > >> customers as per http://www.jump.net.uk/vps , so believe we fit the > >> criteria for inclusion to the predisclosure list. Invitation to > >> report security issues to us is at http://www.jump.net.uk/contact . > >> Your policy and terms for inclusion onto the list has been read and > >> accepted. We'd like jump-admins@jump.net.uk to be added to the list. > >> > >> Thanks > >> James Rice > >> Director > >> Jump Networks Ltd > >> _______________________________________________ > >> Predisclosure-applications mailing list > >> Predisclosure-applications@lists.xenproject.org > >> http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications > > > > > > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed May 20 08:51:44 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 20 May 2015 08:51:44 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yuzj5-0000t6-LW; Wed, 20 May 2015 08:51:43 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yuzj5-0000t1-1J for predisclosure-applications@lists.xenproject.org; Wed, 20 May 2015 08:51:43 +0000 Received: from [193.109.254.147] by server-1.bemta-14.messagelabs.com id CA/F9-02633-E1B4C555; Wed, 20 May 2015 08:51:42 +0000 X-Env-Sender: ijc@hellion.org.uk X-Msg-Ref: server-16.tower-27.messagelabs.com!1432111901!11512847!1 X-Originating-IP: [212.110.190.137] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 30859 invoked from network); 20 May 2015 08:51:41 -0000 Received: from benson.vm.bytemark.co.uk (HELO benson.vm.bytemark.co.uk) (212.110.190.137) by server-16.tower-27.messagelabs.com with DHE-RSA-AES128-SHA encrypted SMTP; 20 May 2015 08:51:41 -0000 Received: from [185.25.64.249] (helo=kazak) by benson.vm.bytemark.co.uk with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.80) (envelope-from ) id 1Yuzj2-0003Ry-Nj; Wed, 20 May 2015 09:51:40 +0100 Message-ID: <1432111899.12989.196.camel@xen.org> From: Ian Campbell To: "James A. T. Rice" Date: Wed, 20 May 2015 09:51:39 +0100 In-Reply-To: References: <1431941318.4944.9.camel@xen.org> X-Mailer: Evolution 3.12.9-1+b1 Mime-Version: 1.0 Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org Thanks James. I have now added jump-admins@jump.net.uk to the list and have sent out copies of 4 currently embargoed issues (XSA-128..131). Ian. On Mon, 2015-05-18 at 11:51 +0100, James A. T. Rice wrote: > Hi Ian, > > Ah, jump-admins@ is Jump Networks Ltd staff, rather than admins > of customers, which I see now it might have appeared to have been. > There are three people on that list (myself, Nick Waterman, and > Hannah Gordon-Smith). > > As I'm sure you've guessed, the obfuscation on the contact > page is purely to dissuade spam, I fully expect spammers implement > basic de-obfuscation into their crawlers, so was trying to use > something slightly different to common obfuscation. Anyway, I've > updated the page to a more familiar format now. > > Thanks > James > > On 18 May 2015, at 10:28, Ian Campbell wrote: > > > Hi James, > > > > Thank you, your application is largely fine, we have just one issue: > > > > Please could you clarify the scope of your jump-admins@ alias. It is > > intended that predisclosures go to a small team dedicated to handling > > incoming security issues, rather than a large team of system > > administrators. We would prefer a dedicated security@ or some such. > > > > It doesn't affect your application but several members of the Xen > > security team found your http://www.jump.net.uk/contact page unclear, in > > particular "please open a ticket with us at support , highly > > confidential reports can be sent to directors .". Adding the > > specific domain or perhaps some alternative formatting for the hint > > towards the email address to use (e.g. some tags) might be > > beneficial. > > > > Thanks, > > > > Ian. > > > > On Wed, 2015-05-13 at 15:09 +0100, James A. T. Rice wrote: > >> Hi, > >> > >> I'm from Jump Networks Ltd, we offer VPS services using Xen to > >> customers as per http://www.jump.net.uk/vps , so believe we fit the > >> criteria for inclusion to the predisclosure list. Invitation to > >> report security issues to us is at http://www.jump.net.uk/contact . > >> Your policy and terms for inclusion onto the list has been read and > >> accepted. We'd like jump-admins@jump.net.uk to be added to the list. > >> > >> Thanks > >> James Rice > >> Director > >> Jump Networks Ltd > >> _______________________________________________ > >> Predisclosure-applications mailing list > >> Predisclosure-applications@lists.xenproject.org > >> http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications > > > > > > _______________________________________________ > Predisclosure-applications mailing list > Predisclosure-applications@lists.xenproject.org > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications From predisclosure-applications-bounces@lists.xenproject.org Wed May 20 10:51:20 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 20 May 2015 10:51:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yv1ap-0002kK-Lb; Wed, 20 May 2015 10:51:19 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yv1ap-0002kC-38 for predisclosure-applications@lists.xenproject.org; Wed, 20 May 2015 10:51:19 +0000 Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id FA/07-02776-6276C555; Wed, 20 May 2015 10:51:18 +0000 X-Env-Sender: james@jump.net.uk X-Msg-Ref: server-11.tower-31.messagelabs.com!1432119077!10890178!1 X-Originating-IP: [212.13.202.84] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 10291 invoked from network); 20 May 2015 10:51:17 -0000 Received: from outmail.jump.org.uk (HELO outmail.jump.org.uk) (212.13.202.84) by server-11.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 20 May 2015 10:51:17 -0000 Received: from gw.jump.net.uk ([212.13.203.62]:59855 helo=[192.168.147.20]) by jump.org.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1) (envelope-from ) id 1Yv1aO-0002oR-1Y; Wed, 20 May 2015 11:50:53 +0100 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: "James A. T. Rice" In-Reply-To: <1432111899.12989.196.camel@xen.org> Date: Wed, 20 May 2015 11:51:13 +0100 Message-Id: References: <1431941318.4944.9.camel@xen.org> <1432111899.12989.196.camel@xen.org> To: Ian Campbell X-Mailer: Apple Mail (2.1878.6) X-Jump-Spam-Score: -2.9 (--) X-Jump-Spam-Report: The result of the Jump Networks jury (spamassassin) on "spamd" is Content analysis details: (-2.9 points, 4.4 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============2943794595059184345==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============2943794595059184345== Content-Type: multipart/signed; boundary="Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Hi Ian, On 20 May 2015, at 09:51, Ian Campbell wrote: > Thanks James. I have now added jump-admins@jump.net.uk to the list and > have sent out copies of 4 currently embargoed issues (XSA-128..131). Thanks, received! Best wishes James Rice Director Jump Networks Ltd --Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVXGchAAoJEGkXpK11ewjCvb0P/AvZNXxCIXEX9ZM70kQbDJhx 7vUZAPUGBdVse02jSQz++1JFQztJKsiGco4aSZgQt0Q4FojvrpD6VvMjVyxtJRIZ doA8C5rSs/JrBZBlVz1o9Brq7K6w6g42Dwt/z4pAbVZ2WDl29WD9/kgIgjXtacFX mhHWvsN+1KjJ3KZ+7Bp5Ok9yk8C62RLv5D8Xbgb0V/3loiLilQiG240VzUpjtXKF hGTLAx0tw2Y9dZ26DDsrhC9sIRhbNTtyXl5bVBs6ghOGLbwT9xjAFVPMWs+1CN0G xMvET+hV8VsfrT8+JVs43u5R/JGQ80CqtWkytn5hp7CmKATAXX125n0Px88+Lkra YTKEt6XHqkxvw5tDpBseP0A0B3RFdScSYAOaBuUFQPXgQCcU8ezJ7WYBrFMxtHsg aAX1FNcN00PCveyjQ8jk4nwHSV1Fizsfcf/832xj/MU8OI0UitVDS7LADA33q9uI 7/tKlRVXs9/d6ig3mZ4ZCt7GT+XU8sVuKsfeejsOqEoHvSH9SX8jXI3/iqSeGt1s MUU3itlNIwC450RoC8IvKZSqiGRcgozJPnzgk/ldmCPb4odA9FF6fTqkvhhnZoZk 1eZQ4s1ae+XUTpsfg8HG+24X4Xbt1KMQomp/ofKhedJzaO1xA6GH57gd1/SajuIJ kN3BMMs2CN6rxRhRLYee =SHsc -----END PGP SIGNATURE----- --Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7-- --===============2943794595059184345== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============2943794595059184345==-- From predisclosure-applications-bounces@lists.xenproject.org Wed May 20 10:51:20 2015 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 20 May 2015 10:51:20 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yv1ap-0002kK-Lb; Wed, 20 May 2015 10:51:19 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Yv1ap-0002kC-38 for predisclosure-applications@lists.xenproject.org; Wed, 20 May 2015 10:51:19 +0000 Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id FA/07-02776-6276C555; Wed, 20 May 2015 10:51:18 +0000 X-Env-Sender: james@jump.net.uk X-Msg-Ref: server-11.tower-31.messagelabs.com!1432119077!10890178!1 X-Originating-IP: [212.13.202.84] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 6.13.15; banners=-,-,- X-VirusChecked: Checked Received: (qmail 10291 invoked from network); 20 May 2015 10:51:17 -0000 Received: from outmail.jump.org.uk (HELO outmail.jump.org.uk) (212.13.202.84) by server-11.tower-31.messagelabs.com with DHE-RSA-AES256-SHA encrypted SMTP; 20 May 2015 10:51:17 -0000 Received: from gw.jump.net.uk ([212.13.203.62]:59855 helo=[192.168.147.20]) by jump.org.uk with esmtpsa (TLSv1:AES128-SHA:128) (Exim 4.80.1) (envelope-from ) id 1Yv1aO-0002oR-1Y; Wed, 20 May 2015 11:50:53 +0100 Mime-Version: 1.0 (Mac OS X Mail 7.3 \(1878.6\)) From: "James A. T. Rice" In-Reply-To: <1432111899.12989.196.camel@xen.org> Date: Wed, 20 May 2015 11:51:13 +0100 Message-Id: References: <1431941318.4944.9.camel@xen.org> <1432111899.12989.196.camel@xen.org> To: Ian Campbell X-Mailer: Apple Mail (2.1878.6) X-Jump-Spam-Score: -2.9 (--) X-Jump-Spam-Report: The result of the Jump Networks jury (spamassassin) on "spamd" is Content analysis details: (-2.9 points, 4.4 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] Cc: predisclosure-applications@lists.xenproject.org Subject: Re: [Predisclosure-applications] Predisclosure list application X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============2943794595059184345==" Sender: predisclosure-applications-bounces@lists.xenproject.org Errors-To: predisclosure-applications-bounces@lists.xenproject.org --===============2943794595059184345== Content-Type: multipart/signed; boundary="Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7"; protocol="application/pgp-signature"; micalg=pgp-sha512 --Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Hi Ian, On 20 May 2015, at 09:51, Ian Campbell wrote: > Thanks James. I have now added jump-admins@jump.net.uk to the list and > have sent out copies of 4 currently embargoed issues (XSA-128..131). Thanks, received! Best wishes James Rice Director Jump Networks Ltd --Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJVXGchAAoJEGkXpK11ewjCvb0P/AvZNXxCIXEX9ZM70kQbDJhx 7vUZAPUGBdVse02jSQz++1JFQztJKsiGco4aSZgQt0Q4FojvrpD6VvMjVyxtJRIZ doA8C5rSs/JrBZBlVz1o9Brq7K6w6g42Dwt/z4pAbVZ2WDl29WD9/kgIgjXtacFX mhHWvsN+1KjJ3KZ+7Bp5Ok9yk8C62RLv5D8Xbgb0V/3loiLilQiG240VzUpjtXKF hGTLAx0tw2Y9dZ26DDsrhC9sIRhbNTtyXl5bVBs6ghOGLbwT9xjAFVPMWs+1CN0G xMvET+hV8VsfrT8+JVs43u5R/JGQ80CqtWkytn5hp7CmKATAXX125n0Px88+Lkra YTKEt6XHqkxvw5tDpBseP0A0B3RFdScSYAOaBuUFQPXgQCcU8ezJ7WYBrFMxtHsg aAX1FNcN00PCveyjQ8jk4nwHSV1Fizsfcf/832xj/MU8OI0UitVDS7LADA33q9uI 7/tKlRVXs9/d6ig3mZ4ZCt7GT+XU8sVuKsfeejsOqEoHvSH9SX8jXI3/iqSeGt1s MUU3itlNIwC450RoC8IvKZSqiGRcgozJPnzgk/ldmCPb4odA9FF6fTqkvhhnZoZk 1eZQ4s1ae+XUTpsfg8HG+24X4Xbt1KMQomp/ofKhedJzaO1xA6GH57gd1/SajuIJ kN3BMMs2CN6rxRhRLYee =SHsc -----END PGP SIGNATURE----- --Apple-Mail=_A271D203-68A5-4DB0-9F8B-5094E157BAA7-- --===============2943794595059184345== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Predisclosure-applications mailing list Predisclosure-applications@lists.xenproject.org http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications --===============2943794595059184345==--