From predisclosure-applications-bounces@lists.xenproject.org Mon Nov 28 14:48:46 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 28 Nov 2016 14:48:46 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBNEa-000286-Gd; Mon, 28 Nov 2016 14:48:44 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBNEZ-000280-1j for predisclosure-applications@lists.xenproject.org; Mon, 28 Nov 2016 14:48:43 +0000 Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id EE/DE-28694-AC34C385; Mon, 28 Nov 2016 14:48:42 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrMIsWRWlGSWpSXmKPExsUSyOL0SPeEs02 EwcmtMhb3mu4zOTB6HP5whSWAMYo1My8pvyKBNWNj8yfGgl/FFQtu7WJtYDyX0sXIxSEksIZR YsXJfiYIZyejxM6OHaxdjBwcbALqElfbZbsYOTlEBDIkVva9YgGxhQX0JeZsbWEEKRERMJGYs M0aokRPYsKL52wgYRYBVYmzz4pBwrxA4XlTFjOC2IwCshKLp7cwgdjMAuISt57MB7MlBAQklu w5zwxhi0q8fPyPFcJWlDh5dhULRH2IxJlzC5kgZgpKnJz5hGUCo8AsJKNmISmbhaQMIq4ncWP qFDYIW1ti2cLXzBC2rsSMf4dYkMUXMLKvYlQvTi0qSy3StdBLKspMzyjJTczM0TU0MNPLTS0u TkxPzUlMKtZLzs/dxAgMfAYg2ME4+7L/IUZJDiYlUd4QLZsIIb6k/JTKjMTijPii0pzU4kOMM hwcShK8Bk5AOcGi1PTUirTMHGAMwqQlOHiURHg9HIHSvMUFibnFmekQqVOMilLivCtB+gRAEh mleXBtsLi/xCgrJczLCHSIEE9BalFuZgmq/CtGcQ5GJWHeGSBTeDLzSuCmvwJazAS0+O1ra5D FJYkIKakGxt17/LhMpkyUdF1wx4jn4Yt6zZ4zGpyfl+UwM6cEZ+d0cdfe+XrFgK2My8k4e3H4 w6I7/31iezWzLm4x6J0zg1m++ebB4j9vU9nbn5mlRbJuXF63+cP1fG0WpvqS3r//9A4ZCqdv4 T/7wTOnwX9LPOOxeT01+ecXvnn6SublqljWafM+P55Xq8RSnJFoqMVcVJwIAAwKQCH2AgAA X-Env-Sender: remy@cloudvps.com X-Msg-Ref: server-4.tower-27.messagelabs.com!1480344520!73621297!1 X-Originating-IP: [81.4.66.226] X-SpamReason: No, hits=0.1 required=7.0 tests=HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29937 invoked from network); 28 Nov 2016 14:48:40 -0000 Received: from smtp01.it-ernity.nl (HELO smtp01.it-ernity.nl) (81.4.66.226) by server-4.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 28 Nov 2016 14:48:40 -0000 Received: from ex01.it-ernity.local (172.16.80.10) by ex01.it-ernity.local (172.16.80.10) with Microsoft SMTP Server (TLS) id 15.0.995.29; Mon, 28 Nov 2016 15:48:44 +0100 Received: from ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667]) by ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667%12]) with mapi id 15.00.0995.032; Mon, 28 Nov 2016 15:48:44 +0100 From: Remy van Elst To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: Application for the predisclosure list Thread-Index: AQHSSYZuylJrbcTDv0GTDGDN95huHA== Date: Mon, 28 Nov 2016 14:48:44 +0000 Message-ID: <1480344519026.65758@cloudvps.com> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.25.102.65] MIME-Version: 1.0 Subject: [Predisclosure-applications] Application for the predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0144857666120995951==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============0144857666120995951== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_148034451902665758cloudvpscom_" --_000_148034451902665758cloudvpscom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I'm writing on behalf of my company with the request to be added to the pre= -disclosure list. I've filled in the information on the security policy pag= e here below. The name of your organization: CloudVPS B.V. Oostmaaslaan 71 15th floor 3063 AN Rotterdam Netherlands Domain name(s) which you use to provide Xen software/services http://www.cloudvps.com/ - http://www.cloudvps.nl/ Pre-disclosure E-mail Alias: securityteam@cloudvps.com A brief description of why you fit the criteria CloudVPS is a large Dutch infrastructure as a service provider. We prov= ide Xen PV, Hyper-V and KVM (OpenStack) servers and a range of related serv= ices like consultancy, custom solutions, certificates, high-availability an= d such. We have a little over 10 000 xen PV servers and run a mix of CentOS and= Ubuntu hypervisor servers underneath with Xen. We do not provide HVM, just= PV. This is, as far as I know, the first time public numbers are mentioned= about our xen vm count. On the page a count of 300,000 guests is mentioned= , but we hope our count is enough as well. By receiving early notice of vulnerabilities we are able to plan time a= nd people. This allows us to better prepare for a disclosure. The servers are provided to our clients generally unmanaged. Clients mo= stly run web servers like apache. If not all of your products/services use Xen, a list of (some of) your prod= ucts/services (or categories thereof) which do. Link(s) to current public web pages, belonging to your organisation, for ea= ch of following pieces of information: Evidence of your status as a service/software provider: If you are a public hosting provider, your public rates or how to g= et a quote Our XEN prices are here: http://www.cloudvps.com/virtual-privat= e-server/prices Evidence of your status as a user/distributor of Xen: Statements about, or descriptions of, your eligible production serv= ices or released software, from which it is immediately evident that they u= se Xen. The page where it is most prominently listed: http://www.cloudv= ps.com/virtual-private-server There are a few articles and posts on our site which mention th= at we use XEN, but it's not all over the place: - http://www.cloudvps.com/community/faq/about-cloudvps/what= -virtualisation-techniques-do-you-use-and-why - http://www.cloudvps.com/community/openstack-faq/openstack= -general/can-i-link-a-vpc-from-the-xen-hyperv-platform-with-an-openstack-pr= ivate-net - http://www.cloudvps.com/blog/xen-vulnerability-doesnt-imp= act-cloudvps/ - http://www.cloudvps.com/blog/emergency-maintenance-tonigh= t-xen-upgrade-on-tuesday-june-12th-2012-startin/ - http://www.cloudvps.com/community/knowledge-base/webbased= -console/ Information about your handling of security problems: Your invitation to members of the public, who discover security pro= blems with your products/services, to report them in confidence to you; Specifically, the contact information (email addresses or other con= tact instructions) which such a member of the public should use. There is no specific responsible disclosure page, but our conta= ct data is listed here, including email and telephone: http://www.cloudvps.com/contact In the past issues have been reported either via our support de= sk or directly via the telephone. Emails go to support@cloudvps.com. After a customer has ordered a VPS a specific email with data l= ike IP and such is sent, which also contains information on how to contact = us. Our SLA page, section 6.1 ACCESS TO SUPPORT has this informatio= n as well: http://www.cloudvps.com/service-level-agreement We handle emails and tickets to our support as described in our= terms, http://www.cloudvps.com/general-terms-and-conditions, which is a PD= F. Response time is, on business days within 4 hours if something is submit= ted before noon, otherwise next business day. For urgent matters we have 2= 4/7 support with an engineer available (http://www.cloudvps.com/contact/sto= ringsnummer) A statement to the effect that you have read this policy and agree to abide= by the terms for inclusion in the list, specifically the requirements to r= egarding confidentiality during an embargo period: I, as well as our security team (the cert), have read the Xen Secur= ity Policy, Handling of embargoed information and we agree to abide by the = terms and requirements for inclusion on the pre-disclosure list. The single (non-personal) email alias you wish added to the predisclosure l= ist. securityteam@cloudvps.com Sincerely, Remy van Elst System Administrator CloudVPS --_000_148034451902665758cloudvpscom_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello,

I'm writing on behalf of my company with the request to be added to the pre= -disclosure list. I've filled in the information on the security policy pag= e here below.

The name of your organization:

    CloudVPS B.V.

    Oostmaaslaan 71
    15th floor
    3063 AN Rotterdam
    Netherlands

Domain name(s) which you use to provide Xen software/services

    http://www.cloudvps.com/ - http://www.cloudvps.nl/


Pre-disclosure E-mail Alias:  securityteam@cloudvps.com


A brief description of why you fit the criteria

    CloudVPS is a large Dutch infrastructure as a service pr= ovider. We provide Xen PV, Hyper-V and KVM (OpenStack) servers and a range = of related services like consultancy, custom solutions, certificates, high-= availability and such.

    We have a little over 10 000 xen PV servers and run a mi= x of CentOS and Ubuntu hypervisor servers underneath with Xen. We do not pr= ovide HVM, just PV. This is, as far as I know, the first time public number= s are mentioned about our xen vm count. On the page a count of 300,000 guests is mentioned, but we hope our count is enou= gh as well.

    By receiving early notice of vulnerabilities we are able= to plan time and people. This allows us to better prepare for a disclosure= .

    The servers are provided to our clients generally unmana= ged. Clients mostly run web servers like apache.

If not all of your products/services use Xen, a list of (some of) your prod= ucts/services (or categories thereof) which do.
Link(s) to current public web pages, belonging to your organisation, for ea= ch of following pieces of information:

    Evidence of your status as a service/software provider:<= br>         If you are a public hosting prov= ider, your public rates or how to get a quote

            Our XEN = prices are here: http://www.cloudvps.com/virtual-private-server/prices

    Evidence of your status as a user/distributor of Xen:         Statements about, or description= s of, your eligible production services or released software, from which it= is immediately evident that they use Xen.

            The page= where it is most prominently listed: http://www.cloudvps.com/virtual-priva= te-server

            There ar= e a few articles and posts on our site which mention that we use XEN, but i= t's not all over the place:

            &nb= sp;   - http://www.cloudvps.com/community/faq/about-cloudvps/what= -virtualisation-techniques-do-you-use-and-why
            &nb= sp;   - http://www.cloudvps.com/community/openstack-faq/openstack= -general/can-i-link-a-vpc-from-the-xen-hyperv-platform-with-an-openstack-pr= ivate-net
            &nb= sp;   - http://www.cloudvps.com/blog/xen-vulnerability-doesnt-imp= act-cloudvps/
            &nb= sp;   - http://www.cloudvps.com/blog/emergency-maintenance-tonigh= t-xen-upgrade-on-tuesday-june-12th-2012-startin/
            &nb= sp;   - http://www.cloudvps.com/community/knowledge-base/webbased= -console/


    Information about your handling of security problems:         Your invitation to members of th= e public, who discover security problems with your products/services, to re= port them in confidence to you;

        Specifically, the contact inform= ation (email addresses or other contact instructions) which such a member o= f the public should use.

            There is= no specific responsible disclosure page, but our contact data is listed he= re, including email and telephone:

            &nb= sp;   http://www.cloudvps.com/contact

            In the p= ast issues have been reported either via our support desk or directly via t= he telephone. Emails go to support@cloudvps.com.

            After a = customer has ordered a VPS a specific email with data like IP and such is s= ent, which also contains information on how to contact us.

            Our SLA = page, section 6.1 ACCESS TO SUPPORT has this information as well: http://ww= w.cloudvps.com/service-level-agreement

            We handl= e emails and tickets to our support as described in our terms, http://www.c= loudvps.com/general-terms-and-conditions, which is a PDF. Response time is,= on business days within 4 hours if something is submitted before  noo= n, otherwise next business day. For urgent matters we have 24/7 support with an engineer ava= ilable (http://www.cloudvps.com/contact/storingsnummer)

A statement to the effect that you have read this policy and agree to abide= by the terms for inclusion in the list, specifically the requirements to r= egarding confidentiality during an embargo period:

        I, as well as our security team = (the cert), have read the Xen Security Policy, Handling of embargoed inform= ation and we agree to abide by the terms and requirements for inclusion on = the pre-disclosure list.



The single (non-personal) email alias you wish added to the predisclosure l= ist.


    securityteam@cloudvps.com


Sincerely,

Remy van Elst
System Administrator

CloudVPS

--_000_148034451902665758cloudvpscom_-- --===============0144857666120995951== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============0144857666120995951==-- From predisclosure-applications-bounces@lists.xenproject.org Mon Nov 28 14:48:46 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Mon, 28 Nov 2016 14:48:46 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBNEa-000286-Gd; Mon, 28 Nov 2016 14:48:44 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBNEZ-000280-1j for predisclosure-applications@lists.xenproject.org; Mon, 28 Nov 2016 14:48:43 +0000 Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id EE/DE-28694-AC34C385; Mon, 28 Nov 2016 14:48:42 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrMIsWRWlGSWpSXmKPExsUSyOL0SPeEs02 EwcmtMhb3mu4zOTB6HP5whSWAMYo1My8pvyKBNWNj8yfGgl/FFQtu7WJtYDyX0sXIxSEksIZR YsXJfiYIZyejxM6OHaxdjBwcbALqElfbZbsYOTlEBDIkVva9YgGxhQX0JeZsbWEEKRERMJGYs M0aokRPYsKL52wgYRYBVYmzz4pBwrxA4XlTFjOC2IwCshKLp7cwgdjMAuISt57MB7MlBAQklu w5zwxhi0q8fPyPFcJWlDh5dhULRH2IxJlzC5kgZgpKnJz5hGUCo8AsJKNmISmbhaQMIq4ncWP qFDYIW1ti2cLXzBC2rsSMf4dYkMUXMLKvYlQvTi0qSy3StdBLKspMzyjJTczM0TU0MNPLTS0u TkxPzUlMKtZLzs/dxAgMfAYg2ME4+7L/IUZJDiYlUd4QLZsIIb6k/JTKjMTijPii0pzU4kOMM hwcShK8Bk5AOcGi1PTUirTMHGAMwqQlOHiURHg9HIHSvMUFibnFmekQqVOMilLivCtB+gRAEh mleXBtsLi/xCgrJczLCHSIEE9BalFuZgmq/CtGcQ5GJWHeGSBTeDLzSuCmvwJazAS0+O1ra5D FJYkIKakGxt17/LhMpkyUdF1wx4jn4Yt6zZ4zGpyfl+UwM6cEZ+d0cdfe+XrFgK2My8k4e3H4 w6I7/31iezWzLm4x6J0zg1m++ebB4j9vU9nbn5mlRbJuXF63+cP1fG0WpvqS3r//9A4ZCqdv4 T/7wTOnwX9LPOOxeT01+ecXvnn6SublqljWafM+P55Xq8RSnJFoqMVcVJwIAAwKQCH2AgAA X-Env-Sender: remy@cloudvps.com X-Msg-Ref: server-4.tower-27.messagelabs.com!1480344520!73621297!1 X-Originating-IP: [81.4.66.226] X-SpamReason: No, hits=0.1 required=7.0 tests=HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29937 invoked from network); 28 Nov 2016 14:48:40 -0000 Received: from smtp01.it-ernity.nl (HELO smtp01.it-ernity.nl) (81.4.66.226) by server-4.tower-27.messagelabs.com with AES256-SHA encrypted SMTP; 28 Nov 2016 14:48:40 -0000 Received: from ex01.it-ernity.local (172.16.80.10) by ex01.it-ernity.local (172.16.80.10) with Microsoft SMTP Server (TLS) id 15.0.995.29; Mon, 28 Nov 2016 15:48:44 +0100 Received: from ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667]) by ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667%12]) with mapi id 15.00.0995.032; Mon, 28 Nov 2016 15:48:44 +0100 From: Remy van Elst To: "predisclosure-applications@lists.xenproject.org" Thread-Topic: Application for the predisclosure list Thread-Index: AQHSSYZuylJrbcTDv0GTDGDN95huHA== Date: Mon, 28 Nov 2016 14:48:44 +0000 Message-ID: <1480344519026.65758@cloudvps.com> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [172.25.102.65] MIME-Version: 1.0 Subject: [Predisclosure-applications] Application for the predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0144857666120995951==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============0144857666120995951== Content-Language: en-US Content-Type: multipart/alternative; boundary="_000_148034451902665758cloudvpscom_" --_000_148034451902665758cloudvpscom_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello, I'm writing on behalf of my company with the request to be added to the pre= -disclosure list. I've filled in the information on the security policy pag= e here below. The name of your organization: CloudVPS B.V. Oostmaaslaan 71 15th floor 3063 AN Rotterdam Netherlands Domain name(s) which you use to provide Xen software/services http://www.cloudvps.com/ - http://www.cloudvps.nl/ Pre-disclosure E-mail Alias: securityteam@cloudvps.com A brief description of why you fit the criteria CloudVPS is a large Dutch infrastructure as a service provider. We prov= ide Xen PV, Hyper-V and KVM (OpenStack) servers and a range of related serv= ices like consultancy, custom solutions, certificates, high-availability an= d such. We have a little over 10 000 xen PV servers and run a mix of CentOS and= Ubuntu hypervisor servers underneath with Xen. We do not provide HVM, just= PV. This is, as far as I know, the first time public numbers are mentioned= about our xen vm count. On the page a count of 300,000 guests is mentioned= , but we hope our count is enough as well. By receiving early notice of vulnerabilities we are able to plan time a= nd people. This allows us to better prepare for a disclosure. The servers are provided to our clients generally unmanaged. Clients mo= stly run web servers like apache. If not all of your products/services use Xen, a list of (some of) your prod= ucts/services (or categories thereof) which do. Link(s) to current public web pages, belonging to your organisation, for ea= ch of following pieces of information: Evidence of your status as a service/software provider: If you are a public hosting provider, your public rates or how to g= et a quote Our XEN prices are here: http://www.cloudvps.com/virtual-privat= e-server/prices Evidence of your status as a user/distributor of Xen: Statements about, or descriptions of, your eligible production serv= ices or released software, from which it is immediately evident that they u= se Xen. The page where it is most prominently listed: http://www.cloudv= ps.com/virtual-private-server There are a few articles and posts on our site which mention th= at we use XEN, but it's not all over the place: - http://www.cloudvps.com/community/faq/about-cloudvps/what= -virtualisation-techniques-do-you-use-and-why - http://www.cloudvps.com/community/openstack-faq/openstack= -general/can-i-link-a-vpc-from-the-xen-hyperv-platform-with-an-openstack-pr= ivate-net - http://www.cloudvps.com/blog/xen-vulnerability-doesnt-imp= act-cloudvps/ - http://www.cloudvps.com/blog/emergency-maintenance-tonigh= t-xen-upgrade-on-tuesday-june-12th-2012-startin/ - http://www.cloudvps.com/community/knowledge-base/webbased= -console/ Information about your handling of security problems: Your invitation to members of the public, who discover security pro= blems with your products/services, to report them in confidence to you; Specifically, the contact information (email addresses or other con= tact instructions) which such a member of the public should use. There is no specific responsible disclosure page, but our conta= ct data is listed here, including email and telephone: http://www.cloudvps.com/contact In the past issues have been reported either via our support de= sk or directly via the telephone. Emails go to support@cloudvps.com. After a customer has ordered a VPS a specific email with data l= ike IP and such is sent, which also contains information on how to contact = us. Our SLA page, section 6.1 ACCESS TO SUPPORT has this informatio= n as well: http://www.cloudvps.com/service-level-agreement We handle emails and tickets to our support as described in our= terms, http://www.cloudvps.com/general-terms-and-conditions, which is a PD= F. Response time is, on business days within 4 hours if something is submit= ted before noon, otherwise next business day. For urgent matters we have 2= 4/7 support with an engineer available (http://www.cloudvps.com/contact/sto= ringsnummer) A statement to the effect that you have read this policy and agree to abide= by the terms for inclusion in the list, specifically the requirements to r= egarding confidentiality during an embargo period: I, as well as our security team (the cert), have read the Xen Secur= ity Policy, Handling of embargoed information and we agree to abide by the = terms and requirements for inclusion on the pre-disclosure list. The single (non-personal) email alias you wish added to the predisclosure l= ist. securityteam@cloudvps.com Sincerely, Remy van Elst System Administrator CloudVPS --_000_148034451902665758cloudvpscom_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable

Hello,

I'm writing on behalf of my company with the request to be added to the pre= -disclosure list. I've filled in the information on the security policy pag= e here below.

The name of your organization:

    CloudVPS B.V.

    Oostmaaslaan 71
    15th floor
    3063 AN Rotterdam
    Netherlands

Domain name(s) which you use to provide Xen software/services

    http://www.cloudvps.com/ - http://www.cloudvps.nl/


Pre-disclosure E-mail Alias:  securityteam@cloudvps.com


A brief description of why you fit the criteria

    CloudVPS is a large Dutch infrastructure as a service pr= ovider. We provide Xen PV, Hyper-V and KVM (OpenStack) servers and a range = of related services like consultancy, custom solutions, certificates, high-= availability and such.

    We have a little over 10 000 xen PV servers and run a mi= x of CentOS and Ubuntu hypervisor servers underneath with Xen. We do not pr= ovide HVM, just PV. This is, as far as I know, the first time public number= s are mentioned about our xen vm count. On the page a count of 300,000 guests is mentioned, but we hope our count is enou= gh as well.

    By receiving early notice of vulnerabilities we are able= to plan time and people. This allows us to better prepare for a disclosure= .

    The servers are provided to our clients generally unmana= ged. Clients mostly run web servers like apache.

If not all of your products/services use Xen, a list of (some of) your prod= ucts/services (or categories thereof) which do.
Link(s) to current public web pages, belonging to your organisation, for ea= ch of following pieces of information:

    Evidence of your status as a service/software provider:<= br>         If you are a public hosting prov= ider, your public rates or how to get a quote

            Our XEN = prices are here: http://www.cloudvps.com/virtual-private-server/prices

    Evidence of your status as a user/distributor of Xen:         Statements about, or description= s of, your eligible production services or released software, from which it= is immediately evident that they use Xen.

            The page= where it is most prominently listed: http://www.cloudvps.com/virtual-priva= te-server

            There ar= e a few articles and posts on our site which mention that we use XEN, but i= t's not all over the place:

            &nb= sp;   - http://www.cloudvps.com/community/faq/about-cloudvps/what= -virtualisation-techniques-do-you-use-and-why
            &nb= sp;   - http://www.cloudvps.com/community/openstack-faq/openstack= -general/can-i-link-a-vpc-from-the-xen-hyperv-platform-with-an-openstack-pr= ivate-net
            &nb= sp;   - http://www.cloudvps.com/blog/xen-vulnerability-doesnt-imp= act-cloudvps/
            &nb= sp;   - http://www.cloudvps.com/blog/emergency-maintenance-tonigh= t-xen-upgrade-on-tuesday-june-12th-2012-startin/
            &nb= sp;   - http://www.cloudvps.com/community/knowledge-base/webbased= -console/


    Information about your handling of security problems:         Your invitation to members of th= e public, who discover security problems with your products/services, to re= port them in confidence to you;

        Specifically, the contact inform= ation (email addresses or other contact instructions) which such a member o= f the public should use.

            There is= no specific responsible disclosure page, but our contact data is listed he= re, including email and telephone:

            &nb= sp;   http://www.cloudvps.com/contact

            In the p= ast issues have been reported either via our support desk or directly via t= he telephone. Emails go to support@cloudvps.com.

            After a = customer has ordered a VPS a specific email with data like IP and such is s= ent, which also contains information on how to contact us.

            Our SLA = page, section 6.1 ACCESS TO SUPPORT has this information as well: http://ww= w.cloudvps.com/service-level-agreement

            We handl= e emails and tickets to our support as described in our terms, http://www.c= loudvps.com/general-terms-and-conditions, which is a PDF. Response time is,= on business days within 4 hours if something is submitted before  noo= n, otherwise next business day. For urgent matters we have 24/7 support with an engineer ava= ilable (http://www.cloudvps.com/contact/storingsnummer)

A statement to the effect that you have read this policy and agree to abide= by the terms for inclusion in the list, specifically the requirements to r= egarding confidentiality during an embargo period:

        I, as well as our security team = (the cert), have read the Xen Security Policy, Handling of embargoed inform= ation and we agree to abide by the terms and requirements for inclusion on = the pre-disclosure list.



The single (non-personal) email alias you wish added to the predisclosure l= ist.


    securityteam@cloudvps.com


Sincerely,

Remy van Elst
System Administrator

CloudVPS

--_000_148034451902665758cloudvpscom_-- --===============0144857666120995951== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============0144857666120995951==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 29 19:14:54 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 29 Nov 2016 19:14:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBnrg-0006U1-I9; Tue, 29 Nov 2016 19:14:52 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBnrf-0006Tv-Un for predisclosure-applications@lists.xenproject.org; Tue, 29 Nov 2016 19:14:52 +0000 Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id 9A/1C-28694-BA3DD385; Tue, 29 Nov 2016 19:14:51 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAKsWRWlGSWpSXmKPExsXiVRuso7vysm2 Ewe9mQYt7TfeZHBg9Dn+4whLAGMWamZeUX5HAmrF0v2jBfp+KeRdiGhifOncxcnEICaxilNi0 bhYLiMMisJ9Z4kTnTyYQR0JgMatE04SjrF2MnEBOjMSSTU+g7HKJKz/uM4HYQgIqEhd7n7BDj JrKJLFn+Wt2kASbgKHEkTVXWUBsEQFTiXlHT7GB2MwCGhKbt98HiwsLGEjMedcFNpRFQFViz4 f/YEN5Bawl+r73M0LYghInZz5hgeiNkjj0cQI7xBEKEj+fLmOFmK8ncWXnY0aIGnGJl0ePsE9 gFJqFpH0WkvZZSMogbF2JXfsOMEPY8hLb386BsnUk2u6fhrK1JZYtfM28gJF9FaN6cWpRWWqR rpFeUlFmekZJbmJmjq6hgZlebmpxcWJ6ak5iUrFecn7uJkZgvDAAwQ7GZX+dDjFKcjApifL+O 2IbIcSXlJ9SmZFYnBFfVJqTWnyIUYaDQ0mCV+ASUE6wKDU9tSItMwcYuTBpCQ4eJRHevReB0r zFBYm5xZnpEKlTjMYcb3a9fMDE0fbhwwMmIZa8/LxUKXHe/SCTBEBKM0rz4AbBEsolRlkpYV5 GoNOEeApSi3IzS1DlXzGKczAqCUNM4cnMK4Hb9wroFCagU96+tgY5pSQRISXVwChuP22h+DlH RY5dolvfVUk8OXR6uui3dXXvXs+ZXHt83YZ4ua7Gv+p9h58t9NL8ebTX6sPC/zMS1ov/vHRzU 2xIwzzbyF/cgkpu72NvPytw0HHYdu/fuzpvzo3nk/+ICwQe+X8joa/xUMl5t0OrjsgdeqHNWe JTbGthHLWV67PILMHWWWWmHQJKLMUZiYZazEXFiQCXecc4IwMAAA== X-Env-Sender: brandon@thinkhuge.net X-Msg-Ref: server-14.tower-27.messagelabs.com!1480446887!62291900!1 X-Originating-IP: [74.125.83.44] X-SpamReason: No, hits=1.6 required=7.0 tests=BODY_RANDOM_LONG, HTML_50_60,HTML_MESSAGE,INVESTMENT_ADVICE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29049 invoked from network); 29 Nov 2016 19:14:49 -0000 Received: from mail-pg0-f44.google.com (HELO mail-pg0-f44.google.com) (74.125.83.44) by server-14.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 29 Nov 2016 19:14:49 -0000 Received: by mail-pg0-f44.google.com with SMTP id f188so72197469pgc.3 for ; Tue, 29 Nov 2016 11:14:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thinkhuge.net; s=google; h=from:to:cc:subject:date:message-id:mime-version:thread-index :content-language; bh=g9WZ358GYQnQhp1kGEnvUc2FWuevnqLclnyozK24cmM=; b=QH548raDHyK6GvP+GMMTkYh6F/UYoS8j8yA/E6VzP9SgoEBPiTa3IRdRBIsRX1AuI6 04ontum+Ykdmci19eMGakLuWP25KqkIbPYAH8Dh3POTedCeTHXbrC4H7fRv4JQoEGD2P j/VgJ5M5wesu9miCBiQBhjeaK7fALOdkjxjA0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :thread-index:content-language; bh=g9WZ358GYQnQhp1kGEnvUc2FWuevnqLclnyozK24cmM=; b=Zp6NyWTbg4Ruc9rosE4bRoLjbUpDlixWVHjtYcg80ppeFN/A9yHDuh5tbve19q5WcY XBYkyMjq2pIJr5FoBOhQm/xkTK/vPxtuhBlKg7FlmjoNtuAYVtiEh5f12k7seBTSXcJ6 vhaMUIvOCzJ0t3aTGUEAeXfSXX1zJxNhMzld/XH5j7DjjQ1rrgkTWLB5UvppaP/xQxDT o2sqQYkmQqmUNF5TLCVr3LqqzwXrBKO75zU3Fv427BKmX5VEScu9YAlQLiuXQAmA0lpw LoO4xmVGDyPcCOY4rjhN6XFDOz2Rp+feRLzb5L7tfq423Sdr8egSQCrvMhqdsszLrAjv 5HQg== X-Gm-Message-State: AKaTC01VBiNXTHfumr2Euy+dW2d3f4Awjqz5hJMH/FdfjjMjG28JV0zDoes/B9qicmH0zbtY X-Received: by 10.98.60.7 with SMTP id j7mr29611167pfa.129.1480446887010; Tue, 29 Nov 2016 11:14:47 -0800 (PST) Received: from venus (ip68-108-177-232.lv.lv.cox.net. [68.108.177.232]) by smtp.googlemail.com with ESMTPSA id n24sm96889012pfb.0.2016.11.29.11.14.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Nov 2016 11:14:45 -0800 (PST) From: "Brandon Shoemaker" To: Date: Tue, 29 Nov 2016 11:14:44 -0800 Message-ID: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdJKdNHXwvKZT/8rSjOVS+PuQ8ApXQ== Content-Language: en-us Cc: 'Will Thomas' Subject: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0233058531569229792==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" This is a multipart message in MIME format. --===============0233058531569229792== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0356_01D24A31.CA82AC20" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_0356_01D24A31.CA82AC20 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello Xen project pre-disclosure application list, We are a public hosting provider in the financial services market segment that utilizes Xen HVM platform. We rent Windows VPS to the public for a fee similar to other cloud hosting providers. We are finding that we really need to get access to the pre-disclosure security advisory list to help with decisions on going forward with a platform update cycle or waiting on an additional embargoed security advisory. Access to the embargoed information will be very helpful with our scheduling of maintenance and minimal disruption of clients. I have reviewed the application process at https://www.xenproject.org/security-policy.html and here below is our information. Name of organization = https://www.fxvm.net/ Parent company = http://www.thinkhuge.net/ Mailing address = Thinkhuge.net 1301 Bank of America Tower 12 Harcourt road, Hong Kong, Central Qualification criteria = We are a public hosting provider utilizing Xen virtualization platform. Products/services use Xen = All of our servers for https://www.fxvm.net/ utilize Xen currently. URL = https://www.fxvm.net/ Evidence of hosting provider = https://www.fxvm.net/en/forex-vps-hosting Evidence of your status as a user/distributor of Xen = We advertise this only one place within our scrolling logos of our technology partners at the bottom of this page > https://www.fxvm.net/ further screenshot proof can be provided if needed. Handling of security problems = We invite members of the public to report security issues to security@thinkhuge.net or support@fxvm.net. Evidence at the bottom of our privacy policy > https://www.fxvm.net/en/docs/privacy-policy We have read this security policy located here > https://www.xenproject.org/security-policy.html and agree to abide by the terms for inclusion in the list including the confidentiality requirements during the embargo period of any security advisory. The non-personal email alias to add to the pre-disclosure list is security@thinkhuge.net I think I've included everything requested. Please let us know if you need any supplemental information or clarification on this application. Regards, Brandon Shoemaker, Principal Server Engineer - Think Huge Ltd. SimpleTrader // ForexSignals // Traderoom // ForexVPS // FXVM // Think Huge Investments ____________________________________________________________________________ ___ Trading derivatives carries a high level of risk to your capital and you should only trade with money you can afford to lose. The content of this message does not constitute investment advice. Please seek personalized advice from a professional financial adviser before making any financial decision. ------=_NextPart_000_0356_01D24A31.CA82AC20 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello Xen project pre-disclosure application = list,

 

We are a public hosting provider in the financial = services market segment that utilizes Xen HVM platform.  We rent = Windows VPS to the public for a fee similar to other cloud hosting = providers.  We are finding that we really need to get access to the = pre-disclosure security advisory list to help with decisions on going = forward with a platform update cycle or waiting on an additional = embargoed security advisory. Access to the embargoed information will be = very helpful with our scheduling of maintenance and minimal disruption = of clients.

 

I have reviewed the application process at = https://www.xenproject.org/security-policy.html and here below is our = information.

 

Name of organization =3D = https://www.fxvm.net/

 

Parent = company =3D http://www.thinkhuge.net/

 

Mailing = address =3D

 

Thinkhuge.net

1301 = Bank of America Tower

12 Harcourt = road, Hong Kong, Central

 

Qualification criteria =3D We are a public hosting = provider utilizing Xen virtualization platform.

 

Products/services use Xen =3D All of our servers for = https://www.fxvm.net/ utilize Xen currently.

 

URL =3D = https://www.fxvm.net/

 

Evidence of = hosting provider =3D = https://www.fxvm.net/en/forex-vps-hosting

 

Evidence of = your status as a user/distributor of Xen =3D We advertise this only one = place within our scrolling logos of our technology partners at the = bottom of this page > https://www.fxvm.net/  further screenshot = proof can be provided if needed.

 

Handling of = security problems =3D We invite members of the public to report security = issues to security@thinkhuge.net or support@fxvm.net.  Evidence at = the bottom of our privacy policy > = https://www.fxvm.net/en/docs/privacy-policy

 

We have read = this security policy located here > = https://www.xenproject.org/security-policy.html and agree to abide by = the terms for inclusion in the list including the confidentiality = requirements during the embargo period of any security = advisory.

 

The non-personal email alias to add to the = pre-disclosure list is security@thinkhuge.net

 

I think I've = included everything requested.  Please let us know if you need any = supplemental information or clarification on this = application.

 

Regards,

 

Brandon = Shoemaker,

Principal Server Engineer = - Think Huge Ltd.

SimpleTrader // ForexSignals // Traderoom // = ForexVPS // FXVM // Think Huge = Investments

_______________________________________________________= ________________________

 

Trading derivatives carries a high level of = risk to your capital and you should only trade with money you can afford = to lose. The content of this message does not constitute investment = advice. Please seek personalized advice from a professional financial = adviser before making any financial decision.

 

------=_NextPart_000_0356_01D24A31.CA82AC20-- --===============0233058531569229792== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============0233058531569229792==-- From predisclosure-applications-bounces@lists.xenproject.org Tue Nov 29 19:14:54 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Tue, 29 Nov 2016 19:14:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBnrg-0006U1-I9; Tue, 29 Nov 2016 19:14:52 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cBnrf-0006Tv-Un for predisclosure-applications@lists.xenproject.org; Tue, 29 Nov 2016 19:14:52 +0000 Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id 9A/1C-28694-BA3DD385; Tue, 29 Nov 2016 19:14:51 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprAKsWRWlGSWpSXmKPExsXiVRuso7vysm2 Ewe9mQYt7TfeZHBg9Dn+4whLAGMWamZeUX5HAmrF0v2jBfp+KeRdiGhifOncxcnEICaxilNi0 bhYLiMMisJ9Z4kTnTyYQR0JgMatE04SjrF2MnEBOjMSSTU+g7HKJKz/uM4HYQgIqEhd7n7BDj JrKJLFn+Wt2kASbgKHEkTVXWUBsEQFTiXlHT7GB2MwCGhKbt98HiwsLGEjMedcFNpRFQFViz4 f/YEN5Bawl+r73M0LYghInZz5hgeiNkjj0cQI7xBEKEj+fLmOFmK8ncWXnY0aIGnGJl0ePsE9 gFJqFpH0WkvZZSMogbF2JXfsOMEPY8hLb386BsnUk2u6fhrK1JZYtfM28gJF9FaN6cWpRWWqR rpFeUlFmekZJbmJmjq6hgZlebmpxcWJ6ak5iUrFecn7uJkZgvDAAwQ7GZX+dDjFKcjApifL+O 2IbIcSXlJ9SmZFYnBFfVJqTWnyIUYaDQ0mCV+ASUE6wKDU9tSItMwcYuTBpCQ4eJRHevReB0r zFBYm5xZnpEKlTjMYcb3a9fMDE0fbhwwMmIZa8/LxUKXHe/SCTBEBKM0rz4AbBEsolRlkpYV5 GoNOEeApSi3IzS1DlXzGKczAqCUNM4cnMK4Hb9wroFCagU96+tgY5pSQRISXVwChuP22h+DlH RY5dolvfVUk8OXR6uui3dXXvXs+ZXHt83YZ4ua7Gv+p9h58t9NL8ebTX6sPC/zMS1ov/vHRzU 2xIwzzbyF/cgkpu72NvPytw0HHYdu/fuzpvzo3nk/+ICwQe+X8joa/xUMl5t0OrjsgdeqHNWe JTbGthHLWV67PILMHWWWWmHQJKLMUZiYZazEXFiQCXecc4IwMAAA== X-Env-Sender: brandon@thinkhuge.net X-Msg-Ref: server-14.tower-27.messagelabs.com!1480446887!62291900!1 X-Originating-IP: [74.125.83.44] X-SpamReason: No, hits=1.6 required=7.0 tests=BODY_RANDOM_LONG, HTML_50_60,HTML_MESSAGE,INVESTMENT_ADVICE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 29049 invoked from network); 29 Nov 2016 19:14:49 -0000 Received: from mail-pg0-f44.google.com (HELO mail-pg0-f44.google.com) (74.125.83.44) by server-14.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 29 Nov 2016 19:14:49 -0000 Received: by mail-pg0-f44.google.com with SMTP id f188so72197469pgc.3 for ; Tue, 29 Nov 2016 11:14:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thinkhuge.net; s=google; h=from:to:cc:subject:date:message-id:mime-version:thread-index :content-language; bh=g9WZ358GYQnQhp1kGEnvUc2FWuevnqLclnyozK24cmM=; b=QH548raDHyK6GvP+GMMTkYh6F/UYoS8j8yA/E6VzP9SgoEBPiTa3IRdRBIsRX1AuI6 04ontum+Ykdmci19eMGakLuWP25KqkIbPYAH8Dh3POTedCeTHXbrC4H7fRv4JQoEGD2P j/VgJ5M5wesu9miCBiQBhjeaK7fALOdkjxjA0= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :thread-index:content-language; bh=g9WZ358GYQnQhp1kGEnvUc2FWuevnqLclnyozK24cmM=; b=Zp6NyWTbg4Ruc9rosE4bRoLjbUpDlixWVHjtYcg80ppeFN/A9yHDuh5tbve19q5WcY XBYkyMjq2pIJr5FoBOhQm/xkTK/vPxtuhBlKg7FlmjoNtuAYVtiEh5f12k7seBTSXcJ6 vhaMUIvOCzJ0t3aTGUEAeXfSXX1zJxNhMzld/XH5j7DjjQ1rrgkTWLB5UvppaP/xQxDT o2sqQYkmQqmUNF5TLCVr3LqqzwXrBKO75zU3Fv427BKmX5VEScu9YAlQLiuXQAmA0lpw LoO4xmVGDyPcCOY4rjhN6XFDOz2Rp+feRLzb5L7tfq423Sdr8egSQCrvMhqdsszLrAjv 5HQg== X-Gm-Message-State: AKaTC01VBiNXTHfumr2Euy+dW2d3f4Awjqz5hJMH/FdfjjMjG28JV0zDoes/B9qicmH0zbtY X-Received: by 10.98.60.7 with SMTP id j7mr29611167pfa.129.1480446887010; Tue, 29 Nov 2016 11:14:47 -0800 (PST) Received: from venus (ip68-108-177-232.lv.lv.cox.net. [68.108.177.232]) by smtp.googlemail.com with ESMTPSA id n24sm96889012pfb.0.2016.11.29.11.14.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 29 Nov 2016 11:14:45 -0800 (PST) From: "Brandon Shoemaker" To: Date: Tue, 29 Nov 2016 11:14:44 -0800 Message-ID: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdJKdNHXwvKZT/8rSjOVS+PuQ8ApXQ== Content-Language: en-us Cc: 'Will Thomas' Subject: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============0233058531569229792==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" This is a multipart message in MIME format. --===============0233058531569229792== Content-Type: multipart/alternative; boundary="----=_NextPart_000_0356_01D24A31.CA82AC20" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_0356_01D24A31.CA82AC20 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello Xen project pre-disclosure application list, We are a public hosting provider in the financial services market segment that utilizes Xen HVM platform. We rent Windows VPS to the public for a fee similar to other cloud hosting providers. We are finding that we really need to get access to the pre-disclosure security advisory list to help with decisions on going forward with a platform update cycle or waiting on an additional embargoed security advisory. Access to the embargoed information will be very helpful with our scheduling of maintenance and minimal disruption of clients. I have reviewed the application process at https://www.xenproject.org/security-policy.html and here below is our information. Name of organization = https://www.fxvm.net/ Parent company = http://www.thinkhuge.net/ Mailing address = Thinkhuge.net 1301 Bank of America Tower 12 Harcourt road, Hong Kong, Central Qualification criteria = We are a public hosting provider utilizing Xen virtualization platform. Products/services use Xen = All of our servers for https://www.fxvm.net/ utilize Xen currently. URL = https://www.fxvm.net/ Evidence of hosting provider = https://www.fxvm.net/en/forex-vps-hosting Evidence of your status as a user/distributor of Xen = We advertise this only one place within our scrolling logos of our technology partners at the bottom of this page > https://www.fxvm.net/ further screenshot proof can be provided if needed. Handling of security problems = We invite members of the public to report security issues to security@thinkhuge.net or support@fxvm.net. Evidence at the bottom of our privacy policy > https://www.fxvm.net/en/docs/privacy-policy We have read this security policy located here > https://www.xenproject.org/security-policy.html and agree to abide by the terms for inclusion in the list including the confidentiality requirements during the embargo period of any security advisory. The non-personal email alias to add to the pre-disclosure list is security@thinkhuge.net I think I've included everything requested. Please let us know if you need any supplemental information or clarification on this application. Regards, Brandon Shoemaker, Principal Server Engineer - Think Huge Ltd. SimpleTrader // ForexSignals // Traderoom // ForexVPS // FXVM // Think Huge Investments ____________________________________________________________________________ ___ Trading derivatives carries a high level of risk to your capital and you should only trade with money you can afford to lose. The content of this message does not constitute investment advice. Please seek personalized advice from a professional financial adviser before making any financial decision. ------=_NextPart_000_0356_01D24A31.CA82AC20 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello Xen project pre-disclosure application = list,

 

We are a public hosting provider in the financial = services market segment that utilizes Xen HVM platform.  We rent = Windows VPS to the public for a fee similar to other cloud hosting = providers.  We are finding that we really need to get access to the = pre-disclosure security advisory list to help with decisions on going = forward with a platform update cycle or waiting on an additional = embargoed security advisory. Access to the embargoed information will be = very helpful with our scheduling of maintenance and minimal disruption = of clients.

 

I have reviewed the application process at = https://www.xenproject.org/security-policy.html and here below is our = information.

 

Name of organization =3D = https://www.fxvm.net/

 

Parent = company =3D http://www.thinkhuge.net/

 

Mailing = address =3D

 

Thinkhuge.net

1301 = Bank of America Tower

12 Harcourt = road, Hong Kong, Central

 

Qualification criteria =3D We are a public hosting = provider utilizing Xen virtualization platform.

 

Products/services use Xen =3D All of our servers for = https://www.fxvm.net/ utilize Xen currently.

 

URL =3D = https://www.fxvm.net/

 

Evidence of = hosting provider =3D = https://www.fxvm.net/en/forex-vps-hosting

 

Evidence of = your status as a user/distributor of Xen =3D We advertise this only one = place within our scrolling logos of our technology partners at the = bottom of this page > https://www.fxvm.net/  further screenshot = proof can be provided if needed.

 

Handling of = security problems =3D We invite members of the public to report security = issues to security@thinkhuge.net or support@fxvm.net.  Evidence at = the bottom of our privacy policy > = https://www.fxvm.net/en/docs/privacy-policy

 

We have read = this security policy located here > = https://www.xenproject.org/security-policy.html and agree to abide by = the terms for inclusion in the list including the confidentiality = requirements during the embargo period of any security = advisory.

 

The non-personal email alias to add to the = pre-disclosure list is security@thinkhuge.net

 

I think I've = included everything requested.  Please let us know if you need any = supplemental information or clarification on this = application.

 

Regards,

 

Brandon = Shoemaker,

Principal Server Engineer = - Think Huge Ltd.

SimpleTrader // ForexSignals // Traderoom // = ForexVPS // FXVM // Think Huge = Investments

_______________________________________________________= ________________________

 

Trading derivatives carries a high level of = risk to your capital and you should only trade with money you can afford = to lose. The content of this message does not constitute investment = advice. Please seek personalized advice from a professional financial = adviser before making any financial decision.

 

------=_NextPart_000_0356_01D24A31.CA82AC20-- --===============0233058531569229792== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============0233058531569229792==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 15:04:00 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 15:04:00 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC6QP-0001Qg-R3; Wed, 30 Nov 2016 15:03:57 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC6QP-0001Qa-68 for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 15:03:57 +0000 Received: from [85.158.143.35] by server-10.bemta-6.messagelabs.com id D2/26-28971-C5AEE385; Wed, 30 Nov 2016 15:03:56 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmleJIrShJLcpLzFFi42K5GHrpsG70K7s IgxW/OCzuNd1ncmD0OPzhCksAYxRrZl5SfkUCa8b17ZuYC2bpVDzd08nSwPhfrYuRi0NIYBWj xPL9c5hBHBaBBlaJvzdXMII4EgJzWCXWbf7A1MXIAeTESEz8rdLFyAlkVkj8X3GIDcQWElCXu LfoNjvEpGVMEl2vTjCBJJgFEiSWHlrACGLzCuhJvLp1mRXEFhYIlPj46TM7iM0moC2x6cYDZh CbU8BGYsWqF2A1LAKqEl9/L2CDmBMmMXvRYzaQG3iBan63uEPstZa482st2CoRAV2JWaePsEP cJiux+/cjpgmMQrOQXDELyRUQcW2JZQtfM8PY1y9dYMQU15J4P/MS+wJGtlWMGsWpRWWpRbqG xnpJRZnpGSW5iZk5uoYGZnq5qcXFiempOYlJxXrJ+bmbGIGRwQAEOxi/LAs4xCjJwaQkysvXa RchxJeUn1KZkVicEV9UmpNafIhRhoNDSYI3+yVQTrAoNT21Ii0zBxijMGkJDh4lEd7ZIGne4o LE3OLMdIjUKUZLjlcfXjxg4niz6yWQ7Pjw4QGTEEtefl6qlDjvdZAGAZCGjNI8uHGwNHKJUVZ KmJcR6EAhnoLUotzMElT5V4ziHIxKwrw9IFN4MvNK4La+AjqICeigt6+tQQ4qSURISTUwOjrc 3tQf6vOw+VX4smMxHpXOe0tKM/pereH40priX1OWdmOZ4qOPz3b+3LHeROQ5z4VvgSfVPvjtP HVSupg5sUDt0OsdqznT49OsLzv8ijpZdP4B44EPIb0Z063Ku688nLvotd+p7ENFxYWHAxd3Wa ofS36yzvvAYR/bB7ciX/rt0LtvfsI0VomlOCPRUIu5qDgRAO+ZY4UeAwAA X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-14.tower-21.messagelabs.com!1480518234!40194039!1 X-Originating-IP: [209.85.210.195] X-SpamReason: No, hits=0.6 required=7.0 tests=BODY_RANDOM_LONG, HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 37019 invoked from network); 30 Nov 2016 15:03:55 -0000 Received: from mail-wj0-f195.google.com (HELO mail-wj0-f195.google.com) (209.85.210.195) by server-14.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 15:03:55 -0000 Received: by mail-wj0-f195.google.com with SMTP id xy5so22572441wjc.1 for ; Wed, 30 Nov 2016 07:03:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=SHiMPzrVGCTezWBm0UPuacKjW7olmp88mPQa8uDyOLo=; b=E/zvwMJg70YhZK/1JSuxZ7GQHcPzZn0gYZaGcC+pMxkPgJUqBULoCrCJM+TygFNUwC z7kZFrWs18qVf7pFFLAbdH1uv3hJcRB6sReJjGSOuwlTJ5UZkUBRmDbBrRrGF5DvjlQ7 gleLDPpAVFMeYc1QH/ceHv0eWVAublTwrJVq6pjluGGh6itq4eBMTrWfPvCvsnZputCV MGYessAz8kPoutjVoqRIygtL+nVf/UmDy+BCPiwf6RizL8JgpSACvxPPLKPqdeY2O7QZ Et8Mi4dAksRRgmmyFNqyDihyh0eZICX1NB9OAhcEI4lzdvvatRDemG1XTRee3FTztCx9 2pAw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=SHiMPzrVGCTezWBm0UPuacKjW7olmp88mPQa8uDyOLo=; b=AGlcloiXcTfNS74BkN/m7xgaMK1vE+GJP7ew+bV6u/1w+H8z0bO2+HbkoeUgkt53aU 9Z5jZ0fF+MZwDUqA0K5nIP9Eiff51aMgUMH+zKUX3TgsA5fArJLBhwT0hzcN3ZdkcRNe /mWrfcHxzkhADlg6iM6fHQYd/B1m99LUHhMbpEWJazye8JH2riENW6ZFD/RTjeZz4WO7 Ma+zwG8r37QRrO4Us7vQsVCmGCQJyrRWJq5p9wTTstMShBMing2R65CvjoUwluWUbKzD +MD7S+xpGxutG5uQbjXiMHjmiKKpi1ALtWq2ulhGSZMy+W8fCMDK/Ao0hYYsJLVbPwga 7jhg== X-Gm-Message-State: AKaTC03hpOLwAo8DE9kONHgkudMQjRgHQ+/ofXiG/iwWCgUt9dkyPC2neyAH0j+dXzsNEQ== X-Received: by 10.194.44.41 with SMTP id b9mr33915757wjm.56.1480518234629; Wed, 30 Nov 2016 07:03:54 -0800 (PST) Received: from ?IPv6:2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f? ([2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f]) by smtp.gmail.com with ESMTPSA id l2sm73467968wji.7.2016.11.30.07.03.53 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 30 Nov 2016 07:03:53 -0800 (PST) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth In-Reply-To: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> Date: Wed, 30 Nov 2016 15:03:52 +0000 Message-Id: <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> To: Brandon Shoemaker X-Mailer: Apple Mail (2.2104) Cc: predisclosure-applications@lists.xenproject.org, Will Thomas Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4948465380043425846==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============4948465380043425846== Content-Type: multipart/alternative; boundary="Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A" --Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi.=20 Thank you for your mail.=20 We are sorry to say that your application did not contain all the = required information. We are not permitted to waive the requirements of = the the Xen Project Security Policy which is defined by the Xen Project = community as a whole. > Evidence of your status as a user/distributor of Xen =3D We advertise = this only one place within our scrolling logos of our technology = partners at the bottom of this page > https://www.fxvm.net/ = further screenshot proof can be provided if = needed. We looked at that web page and did see the Xen logo. However, the policy = requires "Statements about or descriptions of your eligible production = services ... from which it is immediately evident that they use Xen". We don't think = a logo is clear enough to meet this requirement.=20 We have come across such situations a few times before and hosting = providers were typically able to make a clear a statement on their = website that they use Xen as Hypervisor. For an example, see = https://lists.xenproject.org/archives/html/predisclosure-applications/2015= -10/threads.html#00001 = ... The statement does not have to be on a main = page of your site. Examples where service providers published this = information were: e.g. in FAQs, in a Knowledge Base article, etc.=20 Everything else about your application appears to be satisfactory. If = you could point us to the missing information, we would be happy to = process your application.=20 Regards, Security Team= --Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Hi. 

Thank you for your = mail. 

We= are sorry to say that your application did not contain all the required = information. We are not permitted to waive the requirements of the the = Xen Project Security Policy which is defined by the Xen Project = community as a whole.

Evidence of your status as a user/distributor of Xen =3D We = advertise this only one place within our scrolling logos of our = technology partners at the bottom of this page > https://www.fxvm.net/  further screenshot proof can be = provided if needed.

We= looked at that web page and did see the Xen logo. However, the policy = requires "Statements about or descriptions of your eligible production = services ...
from which it is immediately evident that = they use Xen". We don't think a logo is clear enough to meet this = requirement. 

We have come across such = situations a few times before and hosting providers were typically able = to make a clear a statement on their website that they use Xen as = Hypervisor. For an example, see https://lists.xenproject.org/archives/html/predisclosure-applic= ations/2015-10/threads.html#00001 ... The statement does not = have to be on a main page of your site. Examples where service providers = published this information were: e.g. in FAQs, in a Knowledge Base = article, etc. 

Everything else about your = application appears to be satisfactory. If you could point us to the = missing information, we would be happy to process your = application. 

Regards,
Security = Team
= --Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A-- --===============4948465380043425846== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============4948465380043425846==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 15:04:00 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 15:04:00 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC6QP-0001Qg-R3; Wed, 30 Nov 2016 15:03:57 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC6QP-0001Qa-68 for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 15:03:57 +0000 Received: from [85.158.143.35] by server-10.bemta-6.messagelabs.com id D2/26-28971-C5AEE385; Wed, 30 Nov 2016 15:03:56 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFupmleJIrShJLcpLzFFi42K5GHrpsG70K7s IgxW/OCzuNd1ncmD0OPzhCksAYxRrZl5SfkUCa8b17ZuYC2bpVDzd08nSwPhfrYuRi0NIYBWj xPL9c5hBHBaBBlaJvzdXMII4EgJzWCXWbf7A1MXIAeTESEz8rdLFyAlkVkj8X3GIDcQWElCXu LfoNjvEpGVMEl2vTjCBJJgFEiSWHlrACGLzCuhJvLp1mRXEFhYIlPj46TM7iM0moC2x6cYDZh CbU8BGYsWqF2A1LAKqEl9/L2CDmBMmMXvRYzaQG3iBan63uEPstZa482st2CoRAV2JWaePsEP cJiux+/cjpgmMQrOQXDELyRUQcW2JZQtfM8PY1y9dYMQU15J4P/MS+wJGtlWMGsWpRWWpRbqG xnpJRZnpGSW5iZk5uoYGZnq5qcXFiempOYlJxXrJ+bmbGIGRwQAEOxi/LAs4xCjJwaQkysvXa RchxJeUn1KZkVicEV9UmpNafIhRhoNDSYI3+yVQTrAoNT21Ii0zBxijMGkJDh4lEd7ZIGne4o LE3OLMdIjUKUZLjlcfXjxg4niz6yWQ7Pjw4QGTEEtefl6qlDjvdZAGAZCGjNI8uHGwNHKJUVZ KmJcR6EAhnoLUotzMElT5V4ziHIxKwrw9IFN4MvNK4La+AjqICeigt6+tQQ4qSURISTUwOjrc 3tQf6vOw+VX4smMxHpXOe0tKM/pereH40priX1OWdmOZ4qOPz3b+3LHeROQ5z4VvgSfVPvjtP HVSupg5sUDt0OsdqznT49OsLzv8ijpZdP4B44EPIb0Z063Ku688nLvotd+p7ENFxYWHAxd3Wa ofS36yzvvAYR/bB7ciX/rt0LtvfsI0VomlOCPRUIu5qDgRAO+ZY4UeAwAA X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-14.tower-21.messagelabs.com!1480518234!40194039!1 X-Originating-IP: [209.85.210.195] X-SpamReason: No, hits=0.6 required=7.0 tests=BODY_RANDOM_LONG, HTML_50_60,HTML_MESSAGE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 37019 invoked from network); 30 Nov 2016 15:03:55 -0000 Received: from mail-wj0-f195.google.com (HELO mail-wj0-f195.google.com) (209.85.210.195) by server-14.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 15:03:55 -0000 Received: by mail-wj0-f195.google.com with SMTP id xy5so22572441wjc.1 for ; Wed, 30 Nov 2016 07:03:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc:message-id:references :to; bh=SHiMPzrVGCTezWBm0UPuacKjW7olmp88mPQa8uDyOLo=; b=E/zvwMJg70YhZK/1JSuxZ7GQHcPzZn0gYZaGcC+pMxkPgJUqBULoCrCJM+TygFNUwC z7kZFrWs18qVf7pFFLAbdH1uv3hJcRB6sReJjGSOuwlTJ5UZkUBRmDbBrRrGF5DvjlQ7 gleLDPpAVFMeYc1QH/ceHv0eWVAublTwrJVq6pjluGGh6itq4eBMTrWfPvCvsnZputCV MGYessAz8kPoutjVoqRIygtL+nVf/UmDy+BCPiwf6RizL8JgpSACvxPPLKPqdeY2O7QZ Et8Mi4dAksRRgmmyFNqyDihyh0eZICX1NB9OAhcEI4lzdvvatRDemG1XTRee3FTztCx9 2pAw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :message-id:references:to; bh=SHiMPzrVGCTezWBm0UPuacKjW7olmp88mPQa8uDyOLo=; b=AGlcloiXcTfNS74BkN/m7xgaMK1vE+GJP7ew+bV6u/1w+H8z0bO2+HbkoeUgkt53aU 9Z5jZ0fF+MZwDUqA0K5nIP9Eiff51aMgUMH+zKUX3TgsA5fArJLBhwT0hzcN3ZdkcRNe /mWrfcHxzkhADlg6iM6fHQYd/B1m99LUHhMbpEWJazye8JH2riENW6ZFD/RTjeZz4WO7 Ma+zwG8r37QRrO4Us7vQsVCmGCQJyrRWJq5p9wTTstMShBMing2R65CvjoUwluWUbKzD +MD7S+xpGxutG5uQbjXiMHjmiKKpi1ALtWq2ulhGSZMy+W8fCMDK/Ao0hYYsJLVbPwga 7jhg== X-Gm-Message-State: AKaTC03hpOLwAo8DE9kONHgkudMQjRgHQ+/ofXiG/iwWCgUt9dkyPC2neyAH0j+dXzsNEQ== X-Received: by 10.194.44.41 with SMTP id b9mr33915757wjm.56.1480518234629; Wed, 30 Nov 2016 07:03:54 -0800 (PST) Received: from ?IPv6:2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f? ([2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f]) by smtp.gmail.com with ESMTPSA id l2sm73467968wji.7.2016.11.30.07.03.53 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 30 Nov 2016 07:03:53 -0800 (PST) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth In-Reply-To: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> Date: Wed, 30 Nov 2016 15:03:52 +0000 Message-Id: <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> To: Brandon Shoemaker X-Mailer: Apple Mail (2.2104) Cc: predisclosure-applications@lists.xenproject.org, Will Thomas Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============4948465380043425846==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" --===============4948465380043425846== Content-Type: multipart/alternative; boundary="Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A" --Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi.=20 Thank you for your mail.=20 We are sorry to say that your application did not contain all the = required information. We are not permitted to waive the requirements of = the the Xen Project Security Policy which is defined by the Xen Project = community as a whole. > Evidence of your status as a user/distributor of Xen =3D We advertise = this only one place within our scrolling logos of our technology = partners at the bottom of this page > https://www.fxvm.net/ = further screenshot proof can be provided if = needed. We looked at that web page and did see the Xen logo. However, the policy = requires "Statements about or descriptions of your eligible production = services ... from which it is immediately evident that they use Xen". We don't think = a logo is clear enough to meet this requirement.=20 We have come across such situations a few times before and hosting = providers were typically able to make a clear a statement on their = website that they use Xen as Hypervisor. For an example, see = https://lists.xenproject.org/archives/html/predisclosure-applications/2015= -10/threads.html#00001 = ... The statement does not have to be on a main = page of your site. Examples where service providers published this = information were: e.g. in FAQs, in a Knowledge Base article, etc.=20 Everything else about your application appears to be satisfactory. If = you could point us to the missing information, we would be happy to = process your application.=20 Regards, Security Team= --Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
Hi. 

Thank you for your = mail. 

We= are sorry to say that your application did not contain all the required = information. We are not permitted to waive the requirements of the the = Xen Project Security Policy which is defined by the Xen Project = community as a whole.

Evidence of your status as a user/distributor of Xen =3D We = advertise this only one place within our scrolling logos of our = technology partners at the bottom of this page > https://www.fxvm.net/  further screenshot proof can be = provided if needed.

We= looked at that web page and did see the Xen logo. However, the policy = requires "Statements about or descriptions of your eligible production = services ...
from which it is immediately evident that = they use Xen". We don't think a logo is clear enough to meet this = requirement. 

We have come across such = situations a few times before and hosting providers were typically able = to make a clear a statement on their website that they use Xen as = Hypervisor. For an example, see https://lists.xenproject.org/archives/html/predisclosure-applic= ations/2015-10/threads.html#00001 ... The statement does not = have to be on a main page of your site. Examples where service providers = published this information were: e.g. in FAQs, in a Knowledge Base = article, etc. 

Everything else about your = application appears to be satisfactory. If you could point us to the = missing information, we would be happy to process your = application. 

Regards,
Security = Team
= --Apple-Mail=_84D793A9-0B2D-400A-BEC4-32D4C9F4672A-- --===============4948465380043425846== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============4948465380043425846==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 16:13:51 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 16:13:51 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7W2-0007nP-2N; Wed, 30 Nov 2016 16:13:50 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7W0-0007mn-HF for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 16:13:48 +0000 Received: from [85.158.143.35] by server-11.bemta-6.messagelabs.com id 60/F6-28490-BBAFE385; Wed, 30 Nov 2016 16:13:47 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFIsWRWlGSWpSXmKPExsXitHRDpO6uX3Y RBktvqFrca7rP5MDocfjDFZYAxijWzLyk/IoE1oyWo7NZCq7zVPycup61gXEKVxcjJ4eEgL/E gWmP2EBsNgFdiaYtf8FsXgFBiZMzn7CA2MwCOhILdn9ig7DlJba/ncPcxcgBVGMvsWqpNUiYR UBVYvGdb6wgtgiQ3XXwNTtEeYbEjEePwMYICwRIfO76wwTSyimgL9G21hAkLCSgJ3Fh+2UmiG tMJN4u3MkGUiIkoCYxd338BEa+WUjumYXknllI7lnAyLyKUaM4tagstUjXyFQvqSgzPaMkNzE zR9fQwEwvN7W4ODE9NScxqVgvOT93EyMwzBiAYAfjqgWBhxglOZiURHlvvLaLEOJLyk+pzEgs zogvKs1JLT7EKMPBoSTBG/ETKCdYlJqeWpGWmQMMeJi0BAePkgjv3R9Aad7igsTc4sx0iNQpR kUpcd6PIAkBkERGaR5cGyzKLjHKSgnzMgIdIsRTkFqUm1mCKv+KUZyDUUmY1wFkO09mXgnc9F dAi5mAFr99bQ2yuCQRISXVwBg+Medro7ltiOvsqT/fCRudnLBdWuvv4tS3j9oaIx9d0qmMPNp /0jic48fqYrtVCqpHFW8pFIl85rGe+DWjy75q+d+8wr+/GX9IPnpw8pTxAd67MZX9Nv0TjK9F fZgV4M30bMpsF5NdfosZ/ulvW6TFu/Po9T61hNMXmLau4V3qL3cv9DzPQWMlluKMREMt5qLiR AAB7ggurQIAAA== X-Env-Sender: prvs=1356ac827=Ian.Jackson@citrix.com X-Msg-Ref: server-16.tower-21.messagelabs.com!1480522424!41484955!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 5333 invoked from network); 30 Nov 2016 16:13:46 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-16.tower-21.messagelabs.com with RC4-SHA encrypted SMTP; 30 Nov 2016 16:13:46 -0000 X-IronPort-AV: E=Sophos;i="5.31,574,1473120000"; d="scan'208";a="392262713" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22590.64175.36740.749641@mariner.uk.xensource.com> Date: Wed, 30 Nov 2016 16:13:35 +0000 To: Remy van Elst In-Reply-To: <1480344519026.65758@cloudvps.com> References: <1480344519026.65758@cloudvps.com> X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Application for the predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" UmVteSB2YW4gRWxzdCB3cml0ZXMgKCJbUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNdIEFwcGxp Y2F0aW9uIGZvciB0aGUgcHJlZGlzY2xvc3VyZSBsaXN0Iik6Cj4gSSdtIHdyaXRpbmcgb24gYmVo YWxmIG9mIG15IGNvbXBhbnkgd2l0aCB0aGUgcmVxdWVzdCB0byBiZSBhZGRlZCB0bwo+IHRoZSBw cmUtZGlzY2xvc3VyZSBsaXN0LiBJJ3ZlIGZpbGxlZCBpbiB0aGUgaW5mb3JtYXRpb24gb24gdGhl Cj4gc2VjdXJpdHkgcG9saWN5IHBhZ2UgaGVyZSBiZWxvdy4KCkhpLiAgVGhhbmtzIGZvciB5b3Vy IG1haWwuCgpXZSBhcmUgc29ycnkgdG8gc2F5IHRoYXQgeW91ciBhcHBsaWNhdGlvbiBkaWQgbm90 IGNvbnRhaW4gYWxsIHRoZSByZXF1aXJlZAppbmZvcm1hdGlvbi4gV2UgYXJlIG5vdCBwZXJtaXR0 ZWQgdG8gd2FpdmUgdGhlIHJlcXVpcmVtZW50cyBvZiB0aGUgdGhlIFhlbgpQcm9qZWN0IFNlY3Vy aXR5IFBvbGljeSB3aGljaCBpcyBkZWZpbmVkIGJ5IHRoZSBYZW4gUHJvamVjdCBjb21tdW5pdHkg YXMgYQp3aG9sZS4KCj4gICAgIEluZm9ybWF0aW9uIGFib3V0IHlvdXIgaGFuZGxpbmcgb2Ygc2Vj dXJpdHkgcHJvYmxlbXM6Cj4gICAgICAgICBZb3VyIGludml0YXRpb24gdG8gbWVtYmVycyBvZiB0 aGUgcHVibGljLCB3aG8gZGlzY292ZXIgc2VjdXJpdHkKPiBwcm9ibGVtcyB3aXRoIHlvdXIgcHJv ZHVjdHMvc2VydmljZXMsIHRvIHJlcG9ydCB0aGVtIGluIGNvbmZpZGVuY2UgdG8geW91Owo+IAo+ ICAgICAgICAgU3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwgYWRk cmVzc2VzIG9yCj4gb3RoZXIgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1i ZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQKPiB1c2UuCj4gCj4gICAgICAgICAgICAgVGhlcmUgaXMg bm8gc3BlY2lmaWMgcmVzcG9uc2libGUgZGlzY2xvc3VyZSBwYWdlLCBidXQKPiBvdXIgY29udGFj dCBkYXRhIGlzIGxpc3RlZCBoZXJlLCBpbmNsdWRpbmcgZW1haWwgYW5kIHRlbGVwaG9uZToKPiAK PiAgICAgICAgICAgICAgICAgaHR0cDovL3d3dy5jbG91ZHZwcy5jb20vY29udGFjdAoKSSdtIGFm cmFpZCB0aGF0IHRoZSBwb2xpY3kgcmVxdWlyZXMgdXMgdG8gbG9vayBmb3IKCiAgWW91ciBpbnZp dGF0aW9uIHRvIG1lbWJlcnMgb2YgdGhlIHB1YmxpYywgd2hvIGRpc2NvdmVyIHNlY3VyaXR5CiAg cHJvYmxlbXMgd2l0aCB5b3VyIHByb2R1Y3RzL3NlcnZpY2VzLCB0byByZXBvcnQgdGhlbSBpbiBj b25maWRlbmNlCiAgdG8geW91CgpBcyBmYXIgYXMgd2UgY2FuIHNlZSwgdGhlIGdlbmVyYWwgY29u dGFjdCBwYWdlIHlvdSBtZW50aW9uZWQgZG9lcyBub3QKY29udGFpbiBzdWNoIGFuIGludml0YXRp b24uCgpFdmVyeXRoaW5nIGVsc2UgYWJvdXQgeW91ciBhcHBsaWNhdGlvbiBhcHBlYXJzIHRvIGJl IHNhdGlzZmFjdG9yeSwgc28KaWYgeW91IGNvdWxkIHBvaW50IHVzIHRvIHRoYXQgImludml0YXRp b24gdG8gbWVtYmVycyBvZiB0aGUgcHVibGljIgpwYWdlLCB3ZSB3b3VsZCBiZSBoYXBweSB0byBw cm9jZXNzIHlvdXIgYXBwbGljYXRpb24uCgpSZWdhcmRzLApJYW4KKG9uIGJlaGFsZiBvZiB0aGUg WGVuIFByb2plY3QgU2VjdXJpdHkgVGVhbSkKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlz dApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczov L2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9z dXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 16:13:51 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 16:13:51 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7W2-0007nP-2N; Wed, 30 Nov 2016 16:13:50 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7W0-0007mn-HF for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 16:13:48 +0000 Received: from [85.158.143.35] by server-11.bemta-6.messagelabs.com id 60/F6-28490-BBAFE385; Wed, 30 Nov 2016 16:13:47 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFIsWRWlGSWpSXmKPExsXitHRDpO6uX3Y RBktvqFrca7rP5MDocfjDFZYAxijWzLyk/IoE1oyWo7NZCq7zVPycup61gXEKVxcjJ4eEgL/E gWmP2EBsNgFdiaYtf8FsXgFBiZMzn7CA2MwCOhILdn9ig7DlJba/ncPcxcgBVGMvsWqpNUiYR UBVYvGdb6wgtgiQ3XXwNTtEeYbEjEePwMYICwRIfO76wwTSyimgL9G21hAkLCSgJ3Fh+2UmiG tMJN4u3MkGUiIkoCYxd338BEa+WUjumYXknllI7lnAyLyKUaM4tagstUjXyFQvqSgzPaMkNzE zR9fQwEwvN7W4ODE9NScxqVgvOT93EyMwzBiAYAfjqgWBhxglOZiURHlvvLaLEOJLyk+pzEgs zogvKs1JLT7EKMPBoSTBG/ETKCdYlJqeWpGWmQMMeJi0BAePkgjv3R9Aad7igsTc4sx0iNQpR kUpcd6PIAkBkERGaR5cGyzKLjHKSgnzMgIdIsRTkFqUm1mCKv+KUZyDUUmY1wFkO09mXgnc9F dAi5mAFr99bQ2yuCQRISXVwBg+Medro7ltiOvsqT/fCRudnLBdWuvv4tS3j9oaIx9d0qmMPNp /0jic48fqYrtVCqpHFW8pFIl85rGe+DWjy75q+d+8wr+/GX9IPnpw8pTxAd67MZX9Nv0TjK9F fZgV4M30bMpsF5NdfosZ/ulvW6TFu/Po9T61hNMXmLau4V3qL3cv9DzPQWMlluKMREMt5qLiR AAB7ggurQIAAA== X-Env-Sender: prvs=1356ac827=Ian.Jackson@citrix.com X-Msg-Ref: server-16.tower-21.messagelabs.com!1480522424!41484955!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 5333 invoked from network); 30 Nov 2016 16:13:46 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-16.tower-21.messagelabs.com with RC4-SHA encrypted SMTP; 30 Nov 2016 16:13:46 -0000 X-IronPort-AV: E=Sophos;i="5.31,574,1473120000"; d="scan'208";a="392262713" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22590.64175.36740.749641@mariner.uk.xensource.com> Date: Wed, 30 Nov 2016 16:13:35 +0000 To: Remy van Elst In-Reply-To: <1480344519026.65758@cloudvps.com> References: <1480344519026.65758@cloudvps.com> X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: "predisclosure-applications@lists.xenproject.org" Subject: Re: [Predisclosure-applications] Application for the predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" UmVteSB2YW4gRWxzdCB3cml0ZXMgKCJbUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNdIEFwcGxp Y2F0aW9uIGZvciB0aGUgcHJlZGlzY2xvc3VyZSBsaXN0Iik6Cj4gSSdtIHdyaXRpbmcgb24gYmVo YWxmIG9mIG15IGNvbXBhbnkgd2l0aCB0aGUgcmVxdWVzdCB0byBiZSBhZGRlZCB0bwo+IHRoZSBw cmUtZGlzY2xvc3VyZSBsaXN0LiBJJ3ZlIGZpbGxlZCBpbiB0aGUgaW5mb3JtYXRpb24gb24gdGhl Cj4gc2VjdXJpdHkgcG9saWN5IHBhZ2UgaGVyZSBiZWxvdy4KCkhpLiAgVGhhbmtzIGZvciB5b3Vy IG1haWwuCgpXZSBhcmUgc29ycnkgdG8gc2F5IHRoYXQgeW91ciBhcHBsaWNhdGlvbiBkaWQgbm90 IGNvbnRhaW4gYWxsIHRoZSByZXF1aXJlZAppbmZvcm1hdGlvbi4gV2UgYXJlIG5vdCBwZXJtaXR0 ZWQgdG8gd2FpdmUgdGhlIHJlcXVpcmVtZW50cyBvZiB0aGUgdGhlIFhlbgpQcm9qZWN0IFNlY3Vy aXR5IFBvbGljeSB3aGljaCBpcyBkZWZpbmVkIGJ5IHRoZSBYZW4gUHJvamVjdCBjb21tdW5pdHkg YXMgYQp3aG9sZS4KCj4gICAgIEluZm9ybWF0aW9uIGFib3V0IHlvdXIgaGFuZGxpbmcgb2Ygc2Vj dXJpdHkgcHJvYmxlbXM6Cj4gICAgICAgICBZb3VyIGludml0YXRpb24gdG8gbWVtYmVycyBvZiB0 aGUgcHVibGljLCB3aG8gZGlzY292ZXIgc2VjdXJpdHkKPiBwcm9ibGVtcyB3aXRoIHlvdXIgcHJv ZHVjdHMvc2VydmljZXMsIHRvIHJlcG9ydCB0aGVtIGluIGNvbmZpZGVuY2UgdG8geW91Owo+IAo+ ICAgICAgICAgU3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwgYWRk cmVzc2VzIG9yCj4gb3RoZXIgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBtZW1i ZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQKPiB1c2UuCj4gCj4gICAgICAgICAgICAgVGhlcmUgaXMg bm8gc3BlY2lmaWMgcmVzcG9uc2libGUgZGlzY2xvc3VyZSBwYWdlLCBidXQKPiBvdXIgY29udGFj dCBkYXRhIGlzIGxpc3RlZCBoZXJlLCBpbmNsdWRpbmcgZW1haWwgYW5kIHRlbGVwaG9uZToKPiAK PiAgICAgICAgICAgICAgICAgaHR0cDovL3d3dy5jbG91ZHZwcy5jb20vY29udGFjdAoKSSdtIGFm cmFpZCB0aGF0IHRoZSBwb2xpY3kgcmVxdWlyZXMgdXMgdG8gbG9vayBmb3IKCiAgWW91ciBpbnZp dGF0aW9uIHRvIG1lbWJlcnMgb2YgdGhlIHB1YmxpYywgd2hvIGRpc2NvdmVyIHNlY3VyaXR5CiAg cHJvYmxlbXMgd2l0aCB5b3VyIHByb2R1Y3RzL3NlcnZpY2VzLCB0byByZXBvcnQgdGhlbSBpbiBj b25maWRlbmNlCiAgdG8geW91CgpBcyBmYXIgYXMgd2UgY2FuIHNlZSwgdGhlIGdlbmVyYWwgY29u dGFjdCBwYWdlIHlvdSBtZW50aW9uZWQgZG9lcyBub3QKY29udGFpbiBzdWNoIGFuIGludml0YXRp b24uCgpFdmVyeXRoaW5nIGVsc2UgYWJvdXQgeW91ciBhcHBsaWNhdGlvbiBhcHBlYXJzIHRvIGJl IHNhdGlzZmFjdG9yeSwgc28KaWYgeW91IGNvdWxkIHBvaW50IHVzIHRvIHRoYXQgImludml0YXRp b24gdG8gbWVtYmVycyBvZiB0aGUgcHVibGljIgpwYWdlLCB3ZSB3b3VsZCBiZSBoYXBweSB0byBw cm9jZXNzIHlvdXIgYXBwbGljYXRpb24uCgpSZWdhcmRzLApJYW4KKG9uIGJlaGFsZiBvZiB0aGUg WGVuIFByb2plY3QgU2VjdXJpdHkgVGVhbSkKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlz dApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0BsaXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczov L2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1iaW4vbWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9z dXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 16:43:28 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 16:43:28 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7yh-0001TK-UB; Wed, 30 Nov 2016 16:43:27 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7yg-0001T7-8i for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 16:43:26 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 19/54-31715-DA10F385; Wed, 30 Nov 2016 16:43:25 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrHKsWRWlGSWpSXmKPExsVyMfTABt3VjPY RBlPnaFrca7rP5MDocfjDFZYAxijWzLyk/IoE1oz/k68wFjxOqVjasZ2pgXF6dBcjF4eQwCpG iS9HvjCDOCwC15glFk1/z9bFyMkhIbCLVeLkKj0IO0bi/ok9TBB2lcSjST8ZQWwhARWJi71P2 CEmTWeSuDn7P1gzm4ChxJE1V1lAbBEBXYkvF2eD2cxAg07f2Ag0iAOoIUfi3oFQkDCngK1ES+ dnZhBbWCBQYt3j5awgNouAqsSraT/B4rwC1hKLLsxkhbAFJU7OfAI1Mkpiy4wnjBC3KUj8fLq MFWKtlcTeY59ZIWrEJV4ePcI+gVFkFpL2WUjaZyEpg7B1JXbtO8AMYctLbH87B8rWkWi7fxrK 1pZYtvA18wJG9lWM6sWpRWWpRbqGeklFmekZJbmJmTm6hgbGermpxcWJ6ak5iUnFesn5uZsYg fHFAAQ7GJd/dDrEKMnBpCTKe5TBPkKILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO8qkJxgUWp6ak VaZg4w0mHSEhw8SiK8ef/tIoR4iwsSc4sz0yFSpxgtOV59ePGAiePNrpdAsuPDhwdMQix5+Xm pUuK8+SDzBEAaMkrz4MbBktElRlkpYV5GoAOFeApSi3IzS1DlXzGKczAqCfMeBpnCk5lXArf1 FdBBTEAHvX1tDXJQSSJCSqqB8fa0feV/dBa9c8mO6tNLuveh7JzA1bn7Gl/PmLyW8cf3y+0bO V0MMr9MvDfN0Ke+bivLvqmrS2ed7L/H4d75PoN/ZcHXW45sOQ+UD554PiODgfvNoqcBcl/fPk q/Jp5ytW6i2+yXZdeW2X1yTr/xbybD+tcX9H6t+HW92Msqc4po/u6MBypuXGxKLMUZiYZazEX FiQBxeWlrQQMAAA== X-Env-Sender: brandon@thinkhuge.net X-Msg-Ref: server-7.tower-31.messagelabs.com!1480524202!66228404!1 X-Originating-IP: [209.85.192.176] X-SpamReason: No, hits=1.5 required=7.0 tests=BODY_RANDOM_LONG, HTML_MESSAGE,INVESTMENT_ADVICE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32211 invoked from network); 30 Nov 2016 16:43:23 -0000 Received: from mail-pf0-f176.google.com (HELO mail-pf0-f176.google.com) (209.85.192.176) by server-7.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 16:43:23 -0000 Received: by mail-pf0-f176.google.com with SMTP id 189so40021803pfz.3 for ; Wed, 30 Nov 2016 08:43:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thinkhuge.net; s=google; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:thread-index:content-language; bh=PuUrYzBi9H5Wukx3z2QqiATWNPfWVRN89mh9WUjTlXg=; b=RiMicEGUdBgdmlRJuQjEWc/Jk68j7qD2cLx0lvWNPvAbdlSvNnbZR2wfASZ35Weer6 Ce95iuBvRwgOscuDgyjHtHjk3cSA9Q+0QUEpNC5ST6sgeRU/7S+k2uSLejr8IIoDhAMZ 7rbbJUmdNCwf4j78EVhJGvziDiQ21YQokZ0IA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:thread-index:content-language; bh=PuUrYzBi9H5Wukx3z2QqiATWNPfWVRN89mh9WUjTlXg=; b=eZvvXYzXRxErMA97nFXG6nEBZV9txTahkyRZFShxoZ+C51d7HVtJkkSZ9JhorzEIqH xMEiQOGOwCe2m9QHBk5Er0c22N40IsrsmN9z3jCVmJmLUeX1ky6qz1QIeapA40kX53+b MIF2aI//wzv3DDcfyv6drtO4T6kw4qVJKzqK1BGE+7HcdvuzBMejlGUJ8lwLIHoaGSw3 XI2VJfjrB4FKomrPjZ9Ca2Y77o9o9pMmHnNoj64CE6K2v/e6Gja0bw2nPs+2Lu/iqwU1 0bNKhnKq6N5bmw6eDoHPXzOVR5d0qwG8VLC5l3VMre+uaNf9V7wyA/GjWDP3W3i2vaao 6NIA== X-Gm-Message-State: AKaTC00peZOeGtHMCR1Zg313IHYghfaywc83nvjgx2NgRHjLDGv4Fj39uL1OdhtYuvuQZ7JC X-Received: by 10.98.160.29 with SMTP id r29mr34556276pfe.103.1480524201659; Wed, 30 Nov 2016 08:43:21 -0800 (PST) Received: from venus (ip68-108-177-232.lv.lv.cox.net. [68.108.177.232]) by smtp.googlemail.com with ESMTPSA id i124sm86432634pgd.15.2016.11.30.08.43.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Nov 2016 08:43:20 -0800 (PST) From: "Brandon Shoemaker" To: "'Lars Kurth'" References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> In-Reply-To: <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> Date: Wed, 30 Nov 2016 08:43:18 -0800 Message-ID: <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQDrZn6HG+VwBvxuP6NyHbAbofQsdAEoMoVRorZB2HA= Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org, 'Will Thomas' Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8078545780913818741==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" This is a multipart message in MIME format. --===============8078545780913818741== Content-Type: multipart/alternative; boundary="----=_NextPart_000_090B_01D24AE5.CD5E4800" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_090B_01D24AE5.CD5E4800 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello Lars, Thank you for your reply. We've added a bit of information as requested to the bottom of the order page stating our use of Xen. https://fxvm.net/en/forex-vps-hosting What virtualization technology is used? Our VPS are built on the Xen virtualization platform. Let us know if anything else is needed. Regards, Brandon Shoemaker, Principal Server Engineer - Think Huge Ltd. SimpleTrader // ForexSignals // Traderoom // ForexVPS // FXVM // Think Huge Investments ____________________________________________________________________________ ___ Trading derivatives carries a high level of risk to your capital and you should only trade with money you can afford to lose. The content of this message does not constitute investment advice. Please seek personalized advice from a professional financial adviser before making any financial decision. From: Lars Kurth [mailto:lars.kurth.xen@gmail.com] Sent: Wednesday, November 30, 2016 7:04 AM To: Brandon Shoemaker Cc: predisclosure-applications@lists.xenproject.org; Will Thomas Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list Hi. Thank you for your mail. We are sorry to say that your application did not contain all the required information. We are not permitted to waive the requirements of the the Xen Project Security Policy which is defined by the Xen Project community as a whole. Evidence of your status as a user/distributor of Xen = We advertise this only one place within our scrolling logos of our technology partners at the bottom of this page > https://www.fxvm.net/ further screenshot proof can be provided if needed. We looked at that web page and did see the Xen logo. However, the policy requires "Statements about or descriptions of your eligible production services ... from which it is immediately evident that they use Xen". We don't think a logo is clear enough to meet this requirement. We have come across such situations a few times before and hosting providers were typically able to make a clear a statement on their website that they use Xen as Hypervisor. For an example, see https://lists.xenproject.org/archives/html/predisclosure-applications/2015-1 0/threads.html#00001 ... The statement does not have to be on a main page of your site. Examples where service providers published this information were: e.g. in FAQs, in a Knowledge Base article, etc. Everything else about your application appears to be satisfactory. If you could point us to the missing information, we would be happy to process your application. Regards, Security Team ------=_NextPart_000_090B_01D24AE5.CD5E4800 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello = Lars,

 

Thank you = for your reply.  We've added a bit of information as requested to = the bottom of the order page stating our use of = Xen.

 

https://fxvm.net/en/forex-= vps-hosting

 

What = virtualization technology is used?

Our VPS are = built on the Xen virtualization platform.

 

Let us know = if anything else is needed.

 

Regards,=

 

Brandon = Shoemaker,

Principal = Server Engineer - Think Huge Ltd.

SimpleTrader // ForexSignals // Traderoom // ForexVPS // FXVM = // Think Huge = Investments

_____________= __________________________________________________________________

 

Trading = derivatives carries a high level of risk to your capital and you should = only trade with money you can afford to lose. The content of this = message does not constitute investment advice. Please seek personalized = advice from a professional financial adviser before making any financial = decision.

 

From:<= /b> = Lars Kurth [mailto:lars.kurth.xen@gmail.com]
Sent: Wednesday, = November 30, 2016 7:04 AM
To: Brandon Shoemaker = <brandon@thinkhuge.net>
Cc: = predisclosure-applications@lists.xenproject.org; Will Thomas = <will@thinkhuge.net>
Subject: Re: = [Predisclosure-applications] Application for the pre-disclosure = list

 

Hi. 

 

Thank you = for your mail. 

 

We are sorry = to say that your application did not contain all the required = information. We are not permitted to waive the requirements of the the = Xen Project Security Policy which is defined by the Xen Project = community as a whole.

 

Evidence of = your status as a user/distributor of Xen =3D We advertise this only one = place within our scrolling logos of our technology partners at the = bottom of this page > https://www.fxvm.net/  further = screenshot proof can be provided if = needed.

 

We looked at = that web page and did see the Xen logo. However, the policy requires = "Statements about or descriptions of your eligible production = services ...
from which it is immediately evident that they use = Xen". We don't think a logo is clear enough to meet this = requirement. 

 

We have come = across such situations a few times before and hosting providers were = typically able to make a clear a statement on their website that they = use Xen as Hypervisor. For an example, see https://lists.xenproject.org/archives/ht= ml/predisclosure-applications/2015-10/threads.html#00001 ... = The statement does not have to be on a main page of your site. Examples = where service providers published this information were: e.g. in FAQs, = in a Knowledge Base article, = etc. 

 

Everything = else about your application appears to be satisfactory. If you could = point us to the missing information, we would be happy to process your = application. 

 

Regards,

Security = Team

------=_NextPart_000_090B_01D24AE5.CD5E4800-- --===============8078545780913818741== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============8078545780913818741==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 16:43:28 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 16:43:28 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7yh-0001TK-UB; Wed, 30 Nov 2016 16:43:27 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC7yg-0001T7-8i for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 16:43:26 +0000 Received: from [85.158.137.68] by server-17.bemta-3.messagelabs.com id 19/54-31715-DA10F385; Wed, 30 Nov 2016 16:43:25 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrHKsWRWlGSWpSXmKPExsVyMfTABt3VjPY RBlPnaFrca7rP5MDocfjDFZYAxijWzLyk/IoE1oz/k68wFjxOqVjasZ2pgXF6dBcjF4eQwCpG iS9HvjCDOCwC15glFk1/z9bFyMkhIbCLVeLkKj0IO0bi/ok9TBB2lcSjST8ZQWwhARWJi71P2 CEmTWeSuDn7P1gzm4ChxJE1V1lAbBEBXYkvF2eD2cxAg07f2Ag0iAOoIUfi3oFQkDCngK1ES+ dnZhBbWCBQYt3j5awgNouAqsSraT/B4rwC1hKLLsxkhbAFJU7OfAI1Mkpiy4wnjBC3KUj8fLq MFWKtlcTeY59ZIWrEJV4ePcI+gVFkFpL2WUjaZyEpg7B1JXbtO8AMYctLbH87B8rWkWi7fxrK 1pZYtvA18wJG9lWM6sWpRWWpRbqGeklFmekZJbmJmTm6hgbGermpxcWJ6ak5iUnFesn5uZsYg fHFAAQ7GJd/dDrEKMnBpCTKe5TBPkKILyk/pTIjsTgjvqg0J7X4EKMMB4eSBO8qkJxgUWp6ak VaZg4w0mHSEhw8SiK8ef/tIoR4iwsSc4sz0yFSpxgtOV59ePGAiePNrpdAsuPDhwdMQix5+Xm pUuK8+SDzBEAaMkrz4MbBktElRlkpYV5GoAOFeApSi3IzS1DlXzGKczAqCfMeBpnCk5lXArf1 FdBBTEAHvX1tDXJQSSJCSqqB8fa0feV/dBa9c8mO6tNLuveh7JzA1bn7Gl/PmLyW8cf3y+0bO V0MMr9MvDfN0Ke+bivLvqmrS2ed7L/H4d75PoN/ZcHXW45sOQ+UD554PiODgfvNoqcBcl/fPk q/Jp5ytW6i2+yXZdeW2X1yTr/xbybD+tcX9H6t+HW92Msqc4po/u6MBypuXGxKLMUZiYZazEX FiQBxeWlrQQMAAA== X-Env-Sender: brandon@thinkhuge.net X-Msg-Ref: server-7.tower-31.messagelabs.com!1480524202!66228404!1 X-Originating-IP: [209.85.192.176] X-SpamReason: No, hits=1.5 required=7.0 tests=BODY_RANDOM_LONG, HTML_MESSAGE,INVESTMENT_ADVICE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 32211 invoked from network); 30 Nov 2016 16:43:23 -0000 Received: from mail-pf0-f176.google.com (HELO mail-pf0-f176.google.com) (209.85.192.176) by server-7.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 16:43:23 -0000 Received: by mail-pf0-f176.google.com with SMTP id 189so40021803pfz.3 for ; Wed, 30 Nov 2016 08:43:23 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thinkhuge.net; s=google; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:thread-index:content-language; bh=PuUrYzBi9H5Wukx3z2QqiATWNPfWVRN89mh9WUjTlXg=; b=RiMicEGUdBgdmlRJuQjEWc/Jk68j7qD2cLx0lvWNPvAbdlSvNnbZR2wfASZ35Weer6 Ce95iuBvRwgOscuDgyjHtHjk3cSA9Q+0QUEpNC5ST6sgeRU/7S+k2uSLejr8IIoDhAMZ 7rbbJUmdNCwf4j78EVhJGvziDiQ21YQokZ0IA= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:thread-index:content-language; bh=PuUrYzBi9H5Wukx3z2QqiATWNPfWVRN89mh9WUjTlXg=; b=eZvvXYzXRxErMA97nFXG6nEBZV9txTahkyRZFShxoZ+C51d7HVtJkkSZ9JhorzEIqH xMEiQOGOwCe2m9QHBk5Er0c22N40IsrsmN9z3jCVmJmLUeX1ky6qz1QIeapA40kX53+b MIF2aI//wzv3DDcfyv6drtO4T6kw4qVJKzqK1BGE+7HcdvuzBMejlGUJ8lwLIHoaGSw3 XI2VJfjrB4FKomrPjZ9Ca2Y77o9o9pMmHnNoj64CE6K2v/e6Gja0bw2nPs+2Lu/iqwU1 0bNKhnKq6N5bmw6eDoHPXzOVR5d0qwG8VLC5l3VMre+uaNf9V7wyA/GjWDP3W3i2vaao 6NIA== X-Gm-Message-State: AKaTC00peZOeGtHMCR1Zg313IHYghfaywc83nvjgx2NgRHjLDGv4Fj39uL1OdhtYuvuQZ7JC X-Received: by 10.98.160.29 with SMTP id r29mr34556276pfe.103.1480524201659; Wed, 30 Nov 2016 08:43:21 -0800 (PST) Received: from venus (ip68-108-177-232.lv.lv.cox.net. [68.108.177.232]) by smtp.googlemail.com with ESMTPSA id i124sm86432634pgd.15.2016.11.30.08.43.19 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Nov 2016 08:43:20 -0800 (PST) From: "Brandon Shoemaker" To: "'Lars Kurth'" References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> In-Reply-To: <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> Date: Wed, 30 Nov 2016 08:43:18 -0800 Message-ID: <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQDrZn6HG+VwBvxuP6NyHbAbofQsdAEoMoVRorZB2HA= Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org, 'Will Thomas' Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============8078545780913818741==" Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" This is a multipart message in MIME format. --===============8078545780913818741== Content-Type: multipart/alternative; boundary="----=_NextPart_000_090B_01D24AE5.CD5E4800" Content-Language: en-us This is a multipart message in MIME format. ------=_NextPart_000_090B_01D24AE5.CD5E4800 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello Lars, Thank you for your reply. We've added a bit of information as requested to the bottom of the order page stating our use of Xen. https://fxvm.net/en/forex-vps-hosting What virtualization technology is used? Our VPS are built on the Xen virtualization platform. Let us know if anything else is needed. Regards, Brandon Shoemaker, Principal Server Engineer - Think Huge Ltd. SimpleTrader // ForexSignals // Traderoom // ForexVPS // FXVM // Think Huge Investments ____________________________________________________________________________ ___ Trading derivatives carries a high level of risk to your capital and you should only trade with money you can afford to lose. The content of this message does not constitute investment advice. Please seek personalized advice from a professional financial adviser before making any financial decision. From: Lars Kurth [mailto:lars.kurth.xen@gmail.com] Sent: Wednesday, November 30, 2016 7:04 AM To: Brandon Shoemaker Cc: predisclosure-applications@lists.xenproject.org; Will Thomas Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list Hi. Thank you for your mail. We are sorry to say that your application did not contain all the required information. We are not permitted to waive the requirements of the the Xen Project Security Policy which is defined by the Xen Project community as a whole. Evidence of your status as a user/distributor of Xen = We advertise this only one place within our scrolling logos of our technology partners at the bottom of this page > https://www.fxvm.net/ further screenshot proof can be provided if needed. We looked at that web page and did see the Xen logo. However, the policy requires "Statements about or descriptions of your eligible production services ... from which it is immediately evident that they use Xen". We don't think a logo is clear enough to meet this requirement. We have come across such situations a few times before and hosting providers were typically able to make a clear a statement on their website that they use Xen as Hypervisor. For an example, see https://lists.xenproject.org/archives/html/predisclosure-applications/2015-1 0/threads.html#00001 ... The statement does not have to be on a main page of your site. Examples where service providers published this information were: e.g. in FAQs, in a Knowledge Base article, etc. Everything else about your application appears to be satisfactory. If you could point us to the missing information, we would be happy to process your application. Regards, Security Team ------=_NextPart_000_090B_01D24AE5.CD5E4800 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hello = Lars,

 

Thank you = for your reply.  We've added a bit of information as requested to = the bottom of the order page stating our use of = Xen.

 

https://fxvm.net/en/forex-= vps-hosting

 

What = virtualization technology is used?

Our VPS are = built on the Xen virtualization platform.

 

Let us know = if anything else is needed.

 

Regards,=

 

Brandon = Shoemaker,

Principal = Server Engineer - Think Huge Ltd.

SimpleTrader // ForexSignals // Traderoom // ForexVPS // FXVM = // Think Huge = Investments

_____________= __________________________________________________________________

 

Trading = derivatives carries a high level of risk to your capital and you should = only trade with money you can afford to lose. The content of this = message does not constitute investment advice. Please seek personalized = advice from a professional financial adviser before making any financial = decision.

 

From:<= /b> = Lars Kurth [mailto:lars.kurth.xen@gmail.com]
Sent: Wednesday, = November 30, 2016 7:04 AM
To: Brandon Shoemaker = <brandon@thinkhuge.net>
Cc: = predisclosure-applications@lists.xenproject.org; Will Thomas = <will@thinkhuge.net>
Subject: Re: = [Predisclosure-applications] Application for the pre-disclosure = list

 

Hi. 

 

Thank you = for your mail. 

 

We are sorry = to say that your application did not contain all the required = information. We are not permitted to waive the requirements of the the = Xen Project Security Policy which is defined by the Xen Project = community as a whole.

 

Evidence of = your status as a user/distributor of Xen =3D We advertise this only one = place within our scrolling logos of our technology partners at the = bottom of this page > https://www.fxvm.net/  further = screenshot proof can be provided if = needed.

 

We looked at = that web page and did see the Xen logo. However, the policy requires = "Statements about or descriptions of your eligible production = services ...
from which it is immediately evident that they use = Xen". We don't think a logo is clear enough to meet this = requirement. 

 

We have come = across such situations a few times before and hosting providers were = typically able to make a clear a statement on their website that they = use Xen as Hypervisor. For an example, see https://lists.xenproject.org/archives/ht= ml/predisclosure-applications/2015-10/threads.html#00001 ... = The statement does not have to be on a main page of your site. Examples = where service providers published this information were: e.g. in FAQs, = in a Knowledge Base article, = etc. 

 

Everything = else about your application appears to be satisfactory. If you could = point us to the missing information, we would be happy to process your = application. 

 

Regards,

Security = Team

------=_NextPart_000_090B_01D24AE5.CD5E4800-- --===============8078545780913818741== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KUHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z QGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJvamVjdC5vcmcvY2dpLWJp bi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25z --===============8078545780913818741==-- From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 17:06:05 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 17:06:05 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Ka-0005A5-7G; Wed, 30 Nov 2016 17:06:04 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8KZ-00059z-9H for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 17:06:03 +0000 Received: from [85.158.143.35] by server-9.bemta-6.messagelabs.com id 02/89-28694-AF60F385; Wed, 30 Nov 2016 17:06:02 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrOIsWRWlGSWpSXmKPExsXitHSDve4vNvs Ig69feCzuNd1ncmD0OPzhCksAYxRrZl5SfkUCa8aev2tZC6YxV+y4ENzAeIGpi5GTQ0LAX2Jl 0xIwm01AV6Jpy182EJtXQFDi5MwnLCA2s4COxILdn9ggbHmJ7W/nMEPU2Ev8bzwJFOfgYBFQl Xh4LRkkLAI0ZtbpI+xdjFxA5S2MEhsetIHNFxYIkni2dRs7iM0pYCOxevdesPlCAvMYJa7uDY O4x0Ti7cKdYDOFBNQk5q6Pn8DINwvJRbOQXDQLyUULGJlXMWoUpxaVpRbpGpnpJRVlpmeU5CZ m5ugaGpjp5aYWFyemp+YkJhXrJefnbmIEBhoDEOxgPLMg8BCjJAeTkijvUQb7CCG+pPyUyozE 4oz4otKc1OJDjDIcHEoSvKdYgXKCRanpqRVpmTnAkIdJS3DwKInwngBJ8xYXJOYWZ6ZDpE4x6 nK82/zuAZMQS15+XqqUOO88kCIBkKKM0jy4EbD4u8QoKyXMywh0lBBPQWpRbmYJqvwrRnEORi Vh3q0gU3gy80rgNr0COoIJ6Ii3r61BjihJREhJNTAmsfKpMd91M/H0XlCXr/Zhx8rA/m3J3/5 Ul72cXKnzRP8gf6zi7lc3wj6pqYq/Cgq8UeUZ3ue79+myQ08FP32SZTb7uGvtfGWd89VFX9Jb dBWu/Tsx8/LaT9Ou/ZIxaji3r4Vh1cUP2yxWT6+drPhp/mG9lT3Ze263cq2SfpgmUrT54p6KX qUKJZbijERDLeai4kQAmpqKoroCAAA= X-Env-Sender: prvs=1356ac827=Ian.Jackson@citrix.com X-Msg-Ref: server-12.tower-21.messagelabs.com!1480525559!46028278!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 12576 invoked from network); 30 Nov 2016 17:06:01 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-12.tower-21.messagelabs.com with RC4-SHA encrypted SMTP; 30 Nov 2016 17:06:01 -0000 X-IronPort-AV: E=Sophos;i="5.31,574,1473120000"; d="scan'208";a="401051341" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22591.1731.513306.545991@mariner.uk.xensource.com> Date: Wed, 30 Nov 2016 17:05:07 +0000 To: Brandon Shoemaker In-Reply-To: <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: 'Lars Kurth' , predisclosure-applications@lists.xenproject.org, 'Will Thomas' Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" QnJhbmRvbiBTaG9lbWFrZXIgd3JpdGVzICgiUmU6IFtQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9u c10gQXBwbGljYXRpb24gZm9yIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0Iik6Cj4gVGhhbmsgeW91 IGZvciB5b3VyIHJlcGx5LiAgV2UndmUgYWRkZWQgYSBiaXQgb2YgaW5mb3JtYXRpb24gYXMKPiBy ZXF1ZXN0ZWQgdG8gdGhlIGJvdHRvbSBvZiB0aGUgb3JkZXIgcGFnZSBzdGF0aW5nIG91ciB1c2Ug b2YgWGVuLgoKVGhhbmtzLCB0aGF0J3MgZ3JlYXQuCgpXZSd2ZSBhZGRlZCB5b3UgdG8gdGhlIGxp c3QgYW5kIHNlbnQgeW91IHRoZSBvdXRzdGFuZGluZyBlbWJhcmdvZWQKYWR2aXNvcmllcy4KCkxh cnMgd2lsbCBhZGQgeW91IHRvIHRoZSB3ZWIgcGFnZSBsaXN0aW5nIHNob3J0bHkuCgpSZWdhcmRz LApJYW4uCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpQ cmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxpc3QKUHJlZGlzY2xvc3VyZS1hcHBs aWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9y Zy9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnM= From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 17:06:05 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 17:06:05 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Ka-0005A5-7G; Wed, 30 Nov 2016 17:06:04 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8KZ-00059z-9H for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 17:06:03 +0000 Received: from [85.158.143.35] by server-9.bemta-6.messagelabs.com id 02/89-28694-AF60F385; Wed, 30 Nov 2016 17:06:02 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrOIsWRWlGSWpSXmKPExsXitHSDve4vNvs Ig69feCzuNd1ncmD0OPzhCksAYxRrZl5SfkUCa8aev2tZC6YxV+y4ENzAeIGpi5GTQ0LAX2Jl 0xIwm01AV6Jpy182EJtXQFDi5MwnLCA2s4COxILdn9ggbHmJ7W/nMEPU2Ev8bzwJFOfgYBFQl Xh4LRkkLAI0ZtbpI+xdjFxA5S2MEhsetIHNFxYIkni2dRs7iM0pYCOxevdesPlCAvMYJa7uDY O4x0Ti7cKdYDOFBNQk5q6Pn8DINwvJRbOQXDQLyUULGJlXMWoUpxaVpRbpGpnpJRVlpmeU5CZ m5ugaGpjp5aYWFyemp+YkJhXrJefnbmIEBhoDEOxgPLMg8BCjJAeTkijvUQb7CCG+pPyUyozE 4oz4otKc1OJDjDIcHEoSvKdYgXKCRanpqRVpmTnAkIdJS3DwKInwngBJ8xYXJOYWZ6ZDpE4x6 nK82/zuAZMQS15+XqqUOO88kCIBkKKM0jy4EbD4u8QoKyXMywh0lBBPQWpRbmYJqvwrRnEORi Vh3q0gU3gy80rgNr0COoIJ6Ii3r61BjihJREhJNTAmsfKpMd91M/H0XlCXr/Zhx8rA/m3J3/5 Ul72cXKnzRP8gf6zi7lc3wj6pqYq/Cgq8UeUZ3ue79+myQ08FP32SZTb7uGvtfGWd89VFX9Jb dBWu/Tsx8/LaT9Ou/ZIxaji3r4Vh1cUP2yxWT6+drPhp/mG9lT3Ze263cq2SfpgmUrT54p6KX qUKJZbijERDLeai4kQAmpqKoroCAAA= X-Env-Sender: prvs=1356ac827=Ian.Jackson@citrix.com X-Msg-Ref: server-12.tower-21.messagelabs.com!1480525559!46028278!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 12576 invoked from network); 30 Nov 2016 17:06:01 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-12.tower-21.messagelabs.com with RC4-SHA encrypted SMTP; 30 Nov 2016 17:06:01 -0000 X-IronPort-AV: E=Sophos;i="5.31,574,1473120000"; d="scan'208";a="401051341" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22591.1731.513306.545991@mariner.uk.xensource.com> Date: Wed, 30 Nov 2016 17:05:07 +0000 To: Brandon Shoemaker In-Reply-To: <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: 'Lars Kurth' , predisclosure-applications@lists.xenproject.org, 'Will Thomas' Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" QnJhbmRvbiBTaG9lbWFrZXIgd3JpdGVzICgiUmU6IFtQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9u c10gQXBwbGljYXRpb24gZm9yIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0Iik6Cj4gVGhhbmsgeW91 IGZvciB5b3VyIHJlcGx5LiAgV2UndmUgYWRkZWQgYSBiaXQgb2YgaW5mb3JtYXRpb24gYXMKPiBy ZXF1ZXN0ZWQgdG8gdGhlIGJvdHRvbSBvZiB0aGUgb3JkZXIgcGFnZSBzdGF0aW5nIG91ciB1c2Ug b2YgWGVuLgoKVGhhbmtzLCB0aGF0J3MgZ3JlYXQuCgpXZSd2ZSBhZGRlZCB5b3UgdG8gdGhlIGxp c3QgYW5kIHNlbnQgeW91IHRoZSBvdXRzdGFuZGluZyBlbWJhcmdvZWQKYWR2aXNvcmllcy4KCkxh cnMgd2lsbCBhZGQgeW91IHRvIHRoZSB3ZWIgcGFnZSBsaXN0aW5nIHNob3J0bHkuCgpSZWdhcmRz LApJYW4uCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpQ cmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxpc3QKUHJlZGlzY2xvc3VyZS1hcHBs aWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6Ly9saXN0cy54ZW5wcm9qZWN0Lm9y Zy9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnM= From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 17:14:26 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 17:14:26 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Se-0005jy-Sl; Wed, 30 Nov 2016 17:14:24 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Sd-0005js-G7 for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 17:14:23 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id 37/D2-08915-EE80F385; Wed, 30 Nov 2016 17:14:22 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCIsWRWlGSWpSXmKPExsVyMfTSQd23HPY RBv2N2hb3mu4zOTB6HP5whSWAMYo1My8pvyKBNaNh/nuWgussFS+u3WdsYHzH3MXIxSEksIpR ouPWDCYQh0VgFqtE+/SbjCCOhMA2Vol127YBlXECOTESF+41sEDY1RITmraDxYUE1CXuLbrND mEvZ5I48zcGxGYW0JK48e8lE4jNK6An8erWZVYQW1ggUOLjp89g9WwC2hKbbjwAmsPBwSngIP F/MxdImEVAVWLdhJVsIDcwCzQxSuy4sZoVYqa2xLKFr5khZtpI9M55xQTxwgVGid9PPjKCJES Ail6sWscGcaisxO7fj5gmMArPQnLTLCQ3zUIydwEj8ypG9eLUorLUIl0LvaSizPSMktzEzBxd QwNjvdzU4uLE9NScxKRiveT83E2MwFBnAIIdjBfanQ8xSnIwKYnyHmWwjxDiS8pPqcxILM6IL yrNSS0+xCjDwaEkwbuFHSgnWJSanlqRlpkDjDqYtAQHj5II732QNG9xQWJucWY6ROoUoyXHqw 8vHjBxvNv8Dkh2fPjwgEmIJS8/L1VKnLcXpEEApCGjNA9uHCwxXGKUlRLmZQQ6UIinILUoN7M EVf4VozgHo5Iw71mQKTyZeSVwW18BHcQEdNDb19YgB5UkIqSkGhibVpR4WRh0tZ2cffvbYulj 0aIRV18/0jrTmHBV7TDHrrvG6Zpr+jJ8JTrdOafo7PJjfntf4/bxvfUBOol64QGXj62r53GqP RXzPJHBIz7Y4J2gbnbWV4NHpuerjrgW/ozQlTzMe1c7fJlk/+aJBw++22Efeam183lNdH6jya 8LcdNm3ONb66PEUpyRaKjFXFScCABvcutoBwMAAA== X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-11.tower-31.messagelabs.com!1480526061!42891899!1 X-Originating-IP: [209.85.210.193] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 6976 invoked from network); 30 Nov 2016 17:14:21 -0000 Received: from mail-wj0-f193.google.com (HELO mail-wj0-f193.google.com) (209.85.210.193) by server-11.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 17:14:21 -0000 Received: by mail-wj0-f193.google.com with SMTP id he10so8989951wjc.2 for ; Wed, 30 Nov 2016 09:14:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=YgpCq5Z9tOYFzSqaZopH9eAZ236oF1NKXBZSMsN1mvI=; b=PQlJFxWRw0udD0DbhTgBrGmU0aDeGU6dNQkzkmdembaqHU4AD+MESmKmfGIWcyAxje lUu1bjyq1e1Ws++TN6zIElVR9U8MoeLqbDQyDs2ux8KcAFDOxNmqjk6CEmJguOAfQPzg FV/RyCCU9/WiTo8Gc37FjR3qbjvokJWV+H2lYQ5b9YHZCoOx7wliTjEkVYxZoRER+3c8 KCDYhV3GgXjCu1NKefxNkdl0eknK5+sKei+koOeiQjON1moSwrPPiPqLHwLYDI6Qha7J Er4ZV9BSp0WO+JP6y1lIG/akHHVrGrk6sO+ok+Um4DMQrbMQXS8lRLypdbS/N3n8o0Op 6vzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=YgpCq5Z9tOYFzSqaZopH9eAZ236oF1NKXBZSMsN1mvI=; b=FqPaDcK4zvT+ecqgB/w8slrvkwiVpJOrA9ZPntrwuVm8/BLofV4pLFQNt2XMMBnvNi prxRxTX/iphsnRNOh5ZCnybfmII0hdOxqv8xXlYY7388Dtx4LS6iPX8gVJqXQv7ZMaPK mmRxyhol79rQZdT/F9J9yEO7e/+63QEKwHf0LTy8tAKK5wYWEvnF6sGkIDwhDqMX/GXd oxh2Nw8BXYJ4aAr4McmdM3/RVSnROPS2+3ae77onc2kI2MzW2CI2ov02EqKJeNEUMuIr TE1PXfwIHkXFt5QwPBef3k8vC5HK8a36Ws9+QCjWb3fnB8E0tXtCfSFcnLULgc7c1OQT /WEQ== X-Gm-Message-State: AKaTC02DNR23KNNzVO52n0/TnXcJ5ThmgntYhtU1rHiHSebPiWCQKxW4nPwuxqw/ubShKw== X-Received: by 10.194.205.34 with SMTP id ld2mr15899084wjc.211.1480526061268; Wed, 30 Nov 2016 09:14:21 -0800 (PST) Received: from ?IPv6:2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f? ([2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f]) by smtp.gmail.com with ESMTPSA id f76sm8917110wmd.15.2016.11.30.09.14.19 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 30 Nov 2016 09:14:20 -0800 (PST) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth In-Reply-To: <22591.1731.513306.545991@mariner.uk.xensource.com> Date: Wed, 30 Nov 2016 17:14:18 +0000 Message-Id: <8DC62B2D-3B0B-43D1-A42F-07212E696BB2@gmail.com> References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> <22591.1731.513306.545991@mariner.uk.xensource.com> To: Ian Jackson X-Mailer: Apple Mail (2.2104) Cc: predisclosure-applications@lists.xenproject.org, Will Thomas , Brandon Shoemaker Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" Cj4gT24gMzAgTm92IDIwMTYsIGF0IDE3OjA1LCBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUu Y2l0cml4LmNvbT4gd3JvdGU6Cj4gCj4gQnJhbmRvbiBTaG9lbWFrZXIgd3JpdGVzICgiUmU6IFtQ cmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc10gQXBwbGljYXRpb24gZm9yIHRoZSBwcmUtZGlzY2xv c3VyZSBsaXN0Iik6Cj4+IFRoYW5rIHlvdSBmb3IgeW91ciByZXBseS4gIFdlJ3ZlIGFkZGVkIGEg Yml0IG9mIGluZm9ybWF0aW9uIGFzCj4+IHJlcXVlc3RlZCB0byB0aGUgYm90dG9tIG9mIHRoZSBv cmRlciBwYWdlIHN0YXRpbmcgb3VyIHVzZSBvZiBYZW4uCj4gCj4gVGhhbmtzLCB0aGF0J3MgZ3Jl YXQuCj4gCj4gV2UndmUgYWRkZWQgeW91IHRvIHRoZSBsaXN0IGFuZCBzZW50IHlvdSB0aGUgb3V0 c3RhbmRpbmcgZW1iYXJnb2VkCj4gYWR2aXNvcmllcy4KPiAKPiBMYXJzIHdpbGwgYWRkIHlvdSB0 byB0aGUgd2ViIHBhZ2UgbGlzdGluZyBzaG9ydGx5LgoKQnJhbmRvbiwKSSBhbSBhc3N1bWluZyBJ IHNob3VsZCBhZGQgZnh2bS5uZXQgbmV0IHRvIHRoZSBsaXN0aW5nLCBhbmQgbm90IHRoZSBUaGlu a2h1Z2UuY29tCkxhcnMKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1 cmUtYXBwbGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJv amVjdC5vcmcvY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRp b25z From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 17:14:26 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 17:14:26 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Se-0005jy-Sl; Wed, 30 Nov 2016 17:14:24 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Sd-0005js-G7 for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 17:14:23 +0000 Received: from [85.158.137.68] by server-9.bemta-3.messagelabs.com id 37/D2-08915-EE80F385; Wed, 30 Nov 2016 17:14:22 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCIsWRWlGSWpSXmKPExsVyMfTSQd23HPY RBv2N2hb3mu4zOTB6HP5whSWAMYo1My8pvyKBNaNh/nuWgussFS+u3WdsYHzH3MXIxSEksIpR ouPWDCYQh0VgFqtE+/SbjCCOhMA2Vol127YBlXECOTESF+41sEDY1RITmraDxYUE1CXuLbrND mEvZ5I48zcGxGYW0JK48e8lE4jNK6An8erWZVYQW1ggUOLjp89g9WwC2hKbbjwAmsPBwSngIP F/MxdImEVAVWLdhJVsIDcwCzQxSuy4sZoVYqa2xLKFr5khZtpI9M55xQTxwgVGid9PPjKCJES Ail6sWscGcaisxO7fj5gmMArPQnLTLCQ3zUIydwEj8ypG9eLUorLUIl0LvaSizPSMktzEzBxd QwNjvdzU4uLE9NScxKRiveT83E2MwFBnAIIdjBfanQ8xSnIwKYnyHmWwjxDiS8pPqcxILM6IL yrNSS0+xCjDwaEkwbuFHSgnWJSanlqRlpkDjDqYtAQHj5II732QNG9xQWJucWY6ROoUoyXHqw 8vHjBxvNv8Dkh2fPjwgEmIJS8/L1VKnLcXpEEApCGjNA9uHCwxXGKUlRLmZQQ6UIinILUoN7M EVf4VozgHo5Iw71mQKTyZeSVwW18BHcQEdNDb19YgB5UkIqSkGhibVpR4WRh0tZ2cffvbYulj 0aIRV18/0jrTmHBV7TDHrrvG6Zpr+jJ8JTrdOafo7PJjfntf4/bxvfUBOol64QGXj62r53GqP RXzPJHBIz7Y4J2gbnbWV4NHpuerjrgW/ozQlTzMe1c7fJlk/+aJBw++22Efeam183lNdH6jya 8LcdNm3ONb66PEUpyRaKjFXFScCABvcutoBwMAAA== X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-11.tower-31.messagelabs.com!1480526061!42891899!1 X-Originating-IP: [209.85.210.193] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 6976 invoked from network); 30 Nov 2016 17:14:21 -0000 Received: from mail-wj0-f193.google.com (HELO mail-wj0-f193.google.com) (209.85.210.193) by server-11.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 17:14:21 -0000 Received: by mail-wj0-f193.google.com with SMTP id he10so8989951wjc.2 for ; Wed, 30 Nov 2016 09:14:21 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=YgpCq5Z9tOYFzSqaZopH9eAZ236oF1NKXBZSMsN1mvI=; b=PQlJFxWRw0udD0DbhTgBrGmU0aDeGU6dNQkzkmdembaqHU4AD+MESmKmfGIWcyAxje lUu1bjyq1e1Ws++TN6zIElVR9U8MoeLqbDQyDs2ux8KcAFDOxNmqjk6CEmJguOAfQPzg FV/RyCCU9/WiTo8Gc37FjR3qbjvokJWV+H2lYQ5b9YHZCoOx7wliTjEkVYxZoRER+3c8 KCDYhV3GgXjCu1NKefxNkdl0eknK5+sKei+koOeiQjON1moSwrPPiPqLHwLYDI6Qha7J Er4ZV9BSp0WO+JP6y1lIG/akHHVrGrk6sO+ok+Um4DMQrbMQXS8lRLypdbS/N3n8o0Op 6vzQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date:cc :content-transfer-encoding:message-id:references:to; bh=YgpCq5Z9tOYFzSqaZopH9eAZ236oF1NKXBZSMsN1mvI=; b=FqPaDcK4zvT+ecqgB/w8slrvkwiVpJOrA9ZPntrwuVm8/BLofV4pLFQNt2XMMBnvNi prxRxTX/iphsnRNOh5ZCnybfmII0hdOxqv8xXlYY7388Dtx4LS6iPX8gVJqXQv7ZMaPK mmRxyhol79rQZdT/F9J9yEO7e/+63QEKwHf0LTy8tAKK5wYWEvnF6sGkIDwhDqMX/GXd oxh2Nw8BXYJ4aAr4McmdM3/RVSnROPS2+3ae77onc2kI2MzW2CI2ov02EqKJeNEUMuIr TE1PXfwIHkXFt5QwPBef3k8vC5HK8a36Ws9+QCjWb3fnB8E0tXtCfSFcnLULgc7c1OQT /WEQ== X-Gm-Message-State: AKaTC02DNR23KNNzVO52n0/TnXcJ5ThmgntYhtU1rHiHSebPiWCQKxW4nPwuxqw/ubShKw== X-Received: by 10.194.205.34 with SMTP id ld2mr15899084wjc.211.1480526061268; Wed, 30 Nov 2016 09:14:21 -0800 (PST) Received: from ?IPv6:2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f? ([2a02:c7f:ac03:2d00:98ff:b6eb:7e9a:273f]) by smtp.gmail.com with ESMTPSA id f76sm8917110wmd.15.2016.11.30.09.14.19 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 30 Nov 2016 09:14:20 -0800 (PST) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth In-Reply-To: <22591.1731.513306.545991@mariner.uk.xensource.com> Date: Wed, 30 Nov 2016 17:14:18 +0000 Message-Id: <8DC62B2D-3B0B-43D1-A42F-07212E696BB2@gmail.com> References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> <22591.1731.513306.545991@mariner.uk.xensource.com> To: Ian Jackson X-Mailer: Apple Mail (2.2104) Cc: predisclosure-applications@lists.xenproject.org, Will Thomas , Brandon Shoemaker Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" Cj4gT24gMzAgTm92IDIwMTYsIGF0IDE3OjA1LCBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUu Y2l0cml4LmNvbT4gd3JvdGU6Cj4gCj4gQnJhbmRvbiBTaG9lbWFrZXIgd3JpdGVzICgiUmU6IFtQ cmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc10gQXBwbGljYXRpb24gZm9yIHRoZSBwcmUtZGlzY2xv c3VyZSBsaXN0Iik6Cj4+IFRoYW5rIHlvdSBmb3IgeW91ciByZXBseS4gIFdlJ3ZlIGFkZGVkIGEg Yml0IG9mIGluZm9ybWF0aW9uIGFzCj4+IHJlcXVlc3RlZCB0byB0aGUgYm90dG9tIG9mIHRoZSBv cmRlciBwYWdlIHN0YXRpbmcgb3VyIHVzZSBvZiBYZW4uCj4gCj4gVGhhbmtzLCB0aGF0J3MgZ3Jl YXQuCj4gCj4gV2UndmUgYWRkZWQgeW91IHRvIHRoZSBsaXN0IGFuZCBzZW50IHlvdSB0aGUgb3V0 c3RhbmRpbmcgZW1iYXJnb2VkCj4gYWR2aXNvcmllcy4KPiAKPiBMYXJzIHdpbGwgYWRkIHlvdSB0 byB0aGUgd2ViIHBhZ2UgbGlzdGluZyBzaG9ydGx5LgoKQnJhbmRvbiwKSSBhbSBhc3N1bWluZyBJ IHNob3VsZCBhZGQgZnh2bS5uZXQgbmV0IHRvIHRoZSBsaXN0aW5nLCBhbmQgbm90IHRoZSBUaGlu a2h1Z2UuY29tCkxhcnMKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnMgbWFpbGluZyBsaXN0ClByZWRpc2Nsb3N1 cmUtYXBwbGljYXRpb25zQGxpc3RzLnhlbnByb2plY3Qub3JnCmh0dHBzOi8vbGlzdHMueGVucHJv amVjdC5vcmcvY2dpLWJpbi9tYWlsbWFuL2xpc3RpbmZvL3ByZWRpc2Nsb3N1cmUtYXBwbGljYXRp b25z From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 17:19:52 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 17:19:52 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Xw-0005vD-9K; Wed, 30 Nov 2016 17:19:52 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Xv-0005ub-53 for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 17:19:51 +0000 Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id 19/1B-28694-53A0F385; Wed, 30 Nov 2016 17:19:49 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprOKsWRWlGSWpSXmKPExsVyMfTARl1TLvs Ig73t7Bb3mu4zOTB6HP5whSWAMYo1My8pvyKBNWPLtFbGggaeiotfMxoY53F1MXJxCAmsZJRo bj3HCOKwCPxilti/+xM7iCMhcI9VomvaBeYuRk4gJ0ZibVsDlF0ucfLAJRYQW0hAReJi7xN2i FHTmSQaTs8GK2ITMJQ4suYqWJGIQLREx9wJ7CA2M9Cg0zc2MkE0NDJJHP60iQ0kwSlgK7Fifw sjiC0sECix7vFy1i5GDqCbVCVWbowACfMKWEs8e/KeGcIWlDg58wkLxExdiV37DjBD2PIS29/ OgTpUQeLn02WsEDf4SZxZc4ARokZc4uXRI+wTGEVnIRk1C8moWUhGzULSsoCRZRWjenFqUVlq ka6JXlJRZnpGSW5iZo6uoYGZXm5qcXFiempOYlKxXnJ+7iZGYMQwAMEOxu7L/ocYJTmYlER5j zLYRwjxJeWnVGYkFmfEF5XmpBYfYpTh4FCS4FXlAMoJFqWmp1akZeYAYxcmLcHBoyTCKw+S5i 0uSMwtzkyHSJ1itOR49eHFAyaON7teAsmODx8eMAmx5OXnpUqJ8xaCNAiANGSU5sGNg6WXS4y yUsK8jEAHCvEUpBblZpagyr9iFOdgVBLmrQWZwpOZVwK39RXQQUxAB719bQ1yUEkiQkqqgfHk Bt8d69hnmNnqy/QltFy7MF/gjOOUxtJNUlc+bf8i2fDxQWL4ie3/9slapj/hFozr7Ve9Otkm8 fXiPdGsVVab17z88CBoX9/E8pfm/+adylKd4Vpe2eYR5ru0rFbvqYmek03n++CEHV9klJbL3D lxTXniT7138c8O/1vMwnEh+c/+Z7uL/zMqsRRnJBpqMRcVJwIAhVkDOCoDAAA= X-Env-Sender: brandon@thinkhuge.net X-Msg-Ref: server-6.tower-27.messagelabs.com!1480526387!75124060!1 X-Originating-IP: [209.85.192.177] X-SpamReason: No, hits=1.5 required=7.0 tests=BODY_RANDOM_LONG, INVESTMENT_ADVICE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 37207 invoked from network); 30 Nov 2016 17:19:48 -0000 Received: from mail-pf0-f177.google.com (HELO mail-pf0-f177.google.com) (209.85.192.177) by server-6.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 17:19:48 -0000 Received: by mail-pf0-f177.google.com with SMTP id d2so40167095pfd.0 for ; Wed, 30 Nov 2016 09:19:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thinkhuge.net; s=google; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-transfer-encoding:thread-index :content-language; bh=Su4td2SnTdacm0BTTuZIU1aZceP1LL18AHmLfIJjDFo=; b=daO45Bty8KQTuw6YTNFjBTMvwxqVCS7bx1GU7Q12l56mPAMe7VKI0IGa+2lzOTttKA 0Zn+/1UXFCfYKaTiQI8TCKTD88dnXTEBrJvJdXjRk/94Ypy1hyFTyarl+VGhTfux+HMF aGRd4NXLD+teT4t7qvq89FKJ8tM5gs9b4A0hs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:content-transfer-encoding:thread-index :content-language; bh=Su4td2SnTdacm0BTTuZIU1aZceP1LL18AHmLfIJjDFo=; b=NFcBHtB/Elm+/2lh2B7ythftcG6F1Jg/j6zKyLBqN3TskJVew7leQlUyfpI19qBwyF zoEGoDkzk4cFbAmKDA1r/QPGpzI9hRiWjKvGhtfx746tCu7AU+W7RTuh5hFXt2cCtOyQ AgOBYluzWO5fcO77yqPMnm5s0Fh1NZx8veyVgtVyAX2mqHARsG+jpD4gtvHVIoNjGjY4 WoubZ+vkggAm9zTMqwNnLFnx2CQP8Wcyi/Ty3oPppxuhcAxkYMOhpcBn5NFV0yqdrDBO ecGNZe5EDDnLqrMYbFL6IiEWnflmJ/0miMFrGk5OdFFalfm7lzpra79zKj1hy2ti2vbj PPMw== X-Gm-Message-State: AKaTC00Wtr3fux7VFLcHm8j7sYNAuBW198QGxfewrSWi0/tXDuDBmMQy10qd43IFnue7f65z X-Received: by 10.99.166.2 with SMTP id t2mr61751895pge.40.1480526387340; Wed, 30 Nov 2016 09:19:47 -0800 (PST) Received: from venus (ip68-108-177-232.lv.lv.cox.net. [68.108.177.232]) by smtp.googlemail.com with ESMTPSA id r21sm104241311pfd.44.2016.11.30.09.19.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Nov 2016 09:19:46 -0800 (PST) From: "Brandon Shoemaker" To: "'Lars Kurth'" , "'Ian Jackson'" References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> <22591.1731.513306.545991@mariner.uk.xensource.com> <8DC62B2D-3B0B-43D1-A42F-07212E696BB2@gmail.com> In-Reply-To: <8DC62B2D-3B0B-43D1-A42F-07212E696BB2@gmail.com> Date: Wed, 30 Nov 2016 09:19:44 -0800 Message-ID: <097001d24b2d$f27f0d70$d77d2850$@thinkhuge.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQDrZn6HG+VwBvxuP6NyHbAbofQsdAEoMoVRAUftR7MA5gn0uAH3o8CXopUgXbA= Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org, 'Will Thomas' Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" SGV5IExhcnMsCgpZZXMgRlhWTS5uZXQKClJlZ2FyZHMsCgpCcmFuZG9uIFNob2VtYWtlciwKUHJp bmNpcGFsIFNlcnZlciBFbmdpbmVlciAtIFRoaW5rIEh1Z2UgTHRkLgpTaW1wbGVUcmFkZXIgLy8g Rm9yZXhTaWduYWxzIC8vIFRyYWRlcm9vbSAvLyBGb3JleFZQUyAvLyBGWFZNIC8vIFRoaW5rIEh1 Z2UKSW52ZXN0bWVudHMKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpfX18KClRyYWRpbmcgZGVyaXZhdGl2 ZXMgY2FycmllcyBhIGhpZ2ggbGV2ZWwgb2YgcmlzayB0byB5b3VyIGNhcGl0YWwgYW5kIHlvdQpz aG91bGQgb25seSB0cmFkZSB3aXRoIG1vbmV5IHlvdSBjYW4gYWZmb3JkIHRvIGxvc2UuIFRoZSBj b250ZW50IG9mIHRoaXMKbWVzc2FnZSBkb2VzIG5vdCBjb25zdGl0dXRlIGludmVzdG1lbnQgYWR2 aWNlLiBQbGVhc2Ugc2VlayBwZXJzb25hbGl6ZWQKYWR2aWNlIGZyb20gYSBwcm9mZXNzaW9uYWwg ZmluYW5jaWFsIGFkdmlzZXIgYmVmb3JlIG1ha2luZyBhbnkgZmluYW5jaWFsCmRlY2lzaW9uLgoK LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0KRnJvbTogTGFycyBLdXJ0aCBbbWFpbHRvOmxhcnMu a3VydGgueGVuQGdtYWlsLmNvbV0gClNlbnQ6IFdlZG5lc2RheSwgTm92ZW1iZXIgMzAsIDIwMTYg OToxNCBBTQpUbzogSWFuIEphY2tzb24gPGlhbi5qYWNrc29uQGV1LmNpdHJpeC5jb20+CkNjOiBC cmFuZG9uIFNob2VtYWtlciA8YnJhbmRvbkB0aGlua2h1Z2UubmV0PjsKcHJlZGlzY2xvc3VyZS1h cHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmc7IFdpbGwgVGhvbWFzCjx3aWxsQHRoaW5r aHVnZS5uZXQ+ClN1YmplY3Q6IFJlOiBbUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNdIEFwcGxp Y2F0aW9uIGZvciB0aGUgcHJlLWRpc2Nsb3N1cmUKbGlzdAoKCj4gT24gMzAgTm92IDIwMTYsIGF0 IDE3OjA1LCBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4gd3JvdGU6Cj4g Cj4gQnJhbmRvbiBTaG9lbWFrZXIgd3JpdGVzICgiUmU6IFtQcmVkaXNjbG9zdXJlLWFwcGxpY2F0 aW9uc10gQXBwbGljYXRpb24KZm9yIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0Iik6Cj4+IFRoYW5r IHlvdSBmb3IgeW91ciByZXBseS4gIFdlJ3ZlIGFkZGVkIGEgYml0IG9mIGluZm9ybWF0aW9uIGFz IAo+PiByZXF1ZXN0ZWQgdG8gdGhlIGJvdHRvbSBvZiB0aGUgb3JkZXIgcGFnZSBzdGF0aW5nIG91 ciB1c2Ugb2YgWGVuLgo+IAo+IFRoYW5rcywgdGhhdCdzIGdyZWF0Lgo+IAo+IFdlJ3ZlIGFkZGVk IHlvdSB0byB0aGUgbGlzdCBhbmQgc2VudCB5b3UgdGhlIG91dHN0YW5kaW5nIGVtYmFyZ29lZCAK PiBhZHZpc29yaWVzLgo+IAo+IExhcnMgd2lsbCBhZGQgeW91IHRvIHRoZSB3ZWIgcGFnZSBsaXN0 aW5nIHNob3J0bHkuCgpCcmFuZG9uLApJIGFtIGFzc3VtaW5nIEkgc2hvdWxkIGFkZCBmeHZtLm5l dCBuZXQgdG8gdGhlIGxpc3RpbmcsIGFuZCBub3QgdGhlClRoaW5raHVnZS5jb20gTGFycwoKCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClByZWRpc2Nsb3N1 cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlzdApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0Bs aXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczovL2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1iaW4v bWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 17:19:52 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 17:19:52 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Xw-0005vD-9K; Wed, 30 Nov 2016 17:19:52 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC8Xv-0005ub-53 for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 17:19:51 +0000 Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id 19/1B-28694-53A0F385; Wed, 30 Nov 2016 17:19:49 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprOKsWRWlGSWpSXmKPExsVyMfTARl1TLvs Ig73t7Bb3mu4zOTB6HP5whSWAMYo1My8pvyKBNWPLtFbGggaeiotfMxoY53F1MXJxCAmsZJRo bj3HCOKwCPxilti/+xM7iCMhcI9VomvaBeYuRk4gJ0ZibVsDlF0ucfLAJRYQW0hAReJi7xN2i FHTmSQaTs8GK2ITMJQ4suYqWJGIQLREx9wJ7CA2M9Cg0zc2MkE0NDJJHP60iQ0kwSlgK7Fifw sjiC0sECix7vFy1i5GDqCbVCVWbowACfMKWEs8e/KeGcIWlDg58wkLxExdiV37DjBD2PIS29/ OgTpUQeLn02WsEDf4SZxZc4ARokZc4uXRI+wTGEVnIRk1C8moWUhGzULSsoCRZRWjenFqUVlq ka6JXlJRZnpGSW5iZo6uoYGZXm5qcXFiempOYlKxXnJ+7iZGYMQwAMEOxu7L/ocYJTmYlER5j zLYRwjxJeWnVGYkFmfEF5XmpBYfYpTh4FCS4FXlAMoJFqWmp1akZeYAYxcmLcHBoyTCKw+S5i 0uSMwtzkyHSJ1itOR49eHFAyaON7teAsmODx8eMAmx5OXnpUqJ8xaCNAiANGSU5sGNg6WXS4y yUsK8jEAHCvEUpBblZpagyr9iFOdgVBLmrQWZwpOZVwK39RXQQUxAB719bQ1yUEkiQkqqgfHk Bt8d69hnmNnqy/QltFy7MF/gjOOUxtJNUlc+bf8i2fDxQWL4ie3/9slapj/hFozr7Ve9Otkm8 fXiPdGsVVab17z88CBoX9/E8pfm/+adylKd4Vpe2eYR5ru0rFbvqYmek03n++CEHV9klJbL3D lxTXniT7138c8O/1vMwnEh+c/+Z7uL/zMqsRRnJBpqMRcVJwIAhVkDOCoDAAA= X-Env-Sender: brandon@thinkhuge.net X-Msg-Ref: server-6.tower-27.messagelabs.com!1480526387!75124060!1 X-Originating-IP: [209.85.192.177] X-SpamReason: No, hits=1.5 required=7.0 tests=BODY_RANDOM_LONG, INVESTMENT_ADVICE X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 37207 invoked from network); 30 Nov 2016 17:19:48 -0000 Received: from mail-pf0-f177.google.com (HELO mail-pf0-f177.google.com) (209.85.192.177) by server-6.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 30 Nov 2016 17:19:48 -0000 Received: by mail-pf0-f177.google.com with SMTP id d2so40167095pfd.0 for ; Wed, 30 Nov 2016 09:19:48 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thinkhuge.net; s=google; h=from:to:cc:references:in-reply-to:subject:date:message-id :mime-version:content-transfer-encoding:thread-index :content-language; bh=Su4td2SnTdacm0BTTuZIU1aZceP1LL18AHmLfIJjDFo=; b=daO45Bty8KQTuw6YTNFjBTMvwxqVCS7bx1GU7Q12l56mPAMe7VKI0IGa+2lzOTttKA 0Zn+/1UXFCfYKaTiQI8TCKTD88dnXTEBrJvJdXjRk/94Ypy1hyFTyarl+VGhTfux+HMF aGRd4NXLD+teT4t7qvq89FKJ8tM5gs9b4A0hs= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:references:in-reply-to:subject:date :message-id:mime-version:content-transfer-encoding:thread-index :content-language; bh=Su4td2SnTdacm0BTTuZIU1aZceP1LL18AHmLfIJjDFo=; b=NFcBHtB/Elm+/2lh2B7ythftcG6F1Jg/j6zKyLBqN3TskJVew7leQlUyfpI19qBwyF zoEGoDkzk4cFbAmKDA1r/QPGpzI9hRiWjKvGhtfx746tCu7AU+W7RTuh5hFXt2cCtOyQ AgOBYluzWO5fcO77yqPMnm5s0Fh1NZx8veyVgtVyAX2mqHARsG+jpD4gtvHVIoNjGjY4 WoubZ+vkggAm9zTMqwNnLFnx2CQP8Wcyi/Ty3oPppxuhcAxkYMOhpcBn5NFV0yqdrDBO ecGNZe5EDDnLqrMYbFL6IiEWnflmJ/0miMFrGk5OdFFalfm7lzpra79zKj1hy2ti2vbj PPMw== X-Gm-Message-State: AKaTC00Wtr3fux7VFLcHm8j7sYNAuBW198QGxfewrSWi0/tXDuDBmMQy10qd43IFnue7f65z X-Received: by 10.99.166.2 with SMTP id t2mr61751895pge.40.1480526387340; Wed, 30 Nov 2016 09:19:47 -0800 (PST) Received: from venus (ip68-108-177-232.lv.lv.cox.net. [68.108.177.232]) by smtp.googlemail.com with ESMTPSA id r21sm104241311pfd.44.2016.11.30.09.19.45 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 30 Nov 2016 09:19:46 -0800 (PST) From: "Brandon Shoemaker" To: "'Lars Kurth'" , "'Ian Jackson'" References: <035501d24a74$d8a4b3a0$89ee1ae0$@thinkhuge.net> <3329FF1D-17FE-434B-9996-0C899AF2CAB8@gmail.com> <090a01d24b28$db7fb340$927f19c0$@thinkhuge.net> <22591.1731.513306.545991@mariner.uk.xensource.com> <8DC62B2D-3B0B-43D1-A42F-07212E696BB2@gmail.com> In-Reply-To: <8DC62B2D-3B0B-43D1-A42F-07212E696BB2@gmail.com> Date: Wed, 30 Nov 2016 09:19:44 -0800 Message-ID: <097001d24b2d$f27f0d70$d77d2850$@thinkhuge.net> MIME-Version: 1.0 X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQDrZn6HG+VwBvxuP6NyHbAbofQsdAEoMoVRAUftR7MA5gn0uAH3o8CXopUgXbA= Content-Language: en-us Cc: predisclosure-applications@lists.xenproject.org, 'Will Thomas' Subject: Re: [Predisclosure-applications] Application for the pre-disclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" SGV5IExhcnMsCgpZZXMgRlhWTS5uZXQKClJlZ2FyZHMsCgpCcmFuZG9uIFNob2VtYWtlciwKUHJp bmNpcGFsIFNlcnZlciBFbmdpbmVlciAtIFRoaW5rIEh1Z2UgTHRkLgpTaW1wbGVUcmFkZXIgLy8g Rm9yZXhTaWduYWxzIC8vIFRyYWRlcm9vbSAvLyBGb3JleFZQUyAvLyBGWFZNIC8vIFRoaW5rIEh1 Z2UKSW52ZXN0bWVudHMKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpfX18KClRyYWRpbmcgZGVyaXZhdGl2 ZXMgY2FycmllcyBhIGhpZ2ggbGV2ZWwgb2YgcmlzayB0byB5b3VyIGNhcGl0YWwgYW5kIHlvdQpz aG91bGQgb25seSB0cmFkZSB3aXRoIG1vbmV5IHlvdSBjYW4gYWZmb3JkIHRvIGxvc2UuIFRoZSBj b250ZW50IG9mIHRoaXMKbWVzc2FnZSBkb2VzIG5vdCBjb25zdGl0dXRlIGludmVzdG1lbnQgYWR2 aWNlLiBQbGVhc2Ugc2VlayBwZXJzb25hbGl6ZWQKYWR2aWNlIGZyb20gYSBwcm9mZXNzaW9uYWwg ZmluYW5jaWFsIGFkdmlzZXIgYmVmb3JlIG1ha2luZyBhbnkgZmluYW5jaWFsCmRlY2lzaW9uLgoK LS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0KRnJvbTogTGFycyBLdXJ0aCBbbWFpbHRvOmxhcnMu a3VydGgueGVuQGdtYWlsLmNvbV0gClNlbnQ6IFdlZG5lc2RheSwgTm92ZW1iZXIgMzAsIDIwMTYg OToxNCBBTQpUbzogSWFuIEphY2tzb24gPGlhbi5qYWNrc29uQGV1LmNpdHJpeC5jb20+CkNjOiBC cmFuZG9uIFNob2VtYWtlciA8YnJhbmRvbkB0aGlua2h1Z2UubmV0PjsKcHJlZGlzY2xvc3VyZS1h cHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmc7IFdpbGwgVGhvbWFzCjx3aWxsQHRoaW5r aHVnZS5uZXQ+ClN1YmplY3Q6IFJlOiBbUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNdIEFwcGxp Y2F0aW9uIGZvciB0aGUgcHJlLWRpc2Nsb3N1cmUKbGlzdAoKCj4gT24gMzAgTm92IDIwMTYsIGF0 IDE3OjA1LCBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4gd3JvdGU6Cj4g Cj4gQnJhbmRvbiBTaG9lbWFrZXIgd3JpdGVzICgiUmU6IFtQcmVkaXNjbG9zdXJlLWFwcGxpY2F0 aW9uc10gQXBwbGljYXRpb24KZm9yIHRoZSBwcmUtZGlzY2xvc3VyZSBsaXN0Iik6Cj4+IFRoYW5r IHlvdSBmb3IgeW91ciByZXBseS4gIFdlJ3ZlIGFkZGVkIGEgYml0IG9mIGluZm9ybWF0aW9uIGFz IAo+PiByZXF1ZXN0ZWQgdG8gdGhlIGJvdHRvbSBvZiB0aGUgb3JkZXIgcGFnZSBzdGF0aW5nIG91 ciB1c2Ugb2YgWGVuLgo+IAo+IFRoYW5rcywgdGhhdCdzIGdyZWF0Lgo+IAo+IFdlJ3ZlIGFkZGVk IHlvdSB0byB0aGUgbGlzdCBhbmQgc2VudCB5b3UgdGhlIG91dHN0YW5kaW5nIGVtYmFyZ29lZCAK PiBhZHZpc29yaWVzLgo+IAo+IExhcnMgd2lsbCBhZGQgeW91IHRvIHRoZSB3ZWIgcGFnZSBsaXN0 aW5nIHNob3J0bHkuCgpCcmFuZG9uLApJIGFtIGFzc3VtaW5nIEkgc2hvdWxkIGFkZCBmeHZtLm5l dCBuZXQgdG8gdGhlIGxpc3RpbmcsIGFuZCBub3QgdGhlClRoaW5raHVnZS5jb20gTGFycwoKCl9f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClByZWRpc2Nsb3N1 cmUtYXBwbGljYXRpb25zIG1haWxpbmcgbGlzdApQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9uc0Bs aXN0cy54ZW5wcm9qZWN0Lm9yZwpodHRwczovL2xpc3RzLnhlbnByb2plY3Qub3JnL2NnaS1iaW4v bWFpbG1hbi9saXN0aW5mby9wcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucw== From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 18:13:47 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 18:13:47 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC9O6-0001VK-U5; Wed, 30 Nov 2016 18:13:46 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC9O5-0001VE-Ps for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 18:13:45 +0000 Received: from [85.158.143.35] by server-7.bemta-6.messagelabs.com id D1/A3-29519-8D61F385; Wed, 30 Nov 2016 18:13:44 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrEIsWRWlGSWpSXmKPExsUSyOL0SPeGmH2 EwZnNUhb3mu4zOTB6HP5whSWAMYo1My8pvyKBNWPp/enMBacFK6Y+nsXSwHiOr4uRi0NIYA2j xJdX99khnJ2MEi9WrmLrYuTgYBNQl7jaLtvFyMkhIjCJUWL5rUwQW1ggUGLi3FNsEPEgibMbe lggbCuJ1sbHjCA2i4CqxIZtV5hAbF4BXYnrFzaC2UICSRIvdr1nBbE5BRwkljf/ApvDKCArsX h6C1gNs4C4xK0n88FsCQEBiSV7zjND2KISLx//Y4WwlSRe7W6DqteTuDF1ChuErS2xbOFrZoi 9ghInZz5hmcAoPAvJ2FlIWmYhaZmFpGUBI8sqRo3i1KKy1CJdQ1O9pKLM9IyS3MTMHF1DAzO9 3NTi4sT01JzEpGK95PzcTYzA8GcAgh2M35YFHGKU5GBSEuU9ymAfIcSXlJ9SmZFYnBFfVJqTW nyIUYaDQ0mCd58oUE6wKDU9tSItMwcYiTBpCQ4eJRHe+8JAad7igsTc4sx0iNQpRl2ON7tePm ASYsnLz0uVEuddBDJDAKQoozQPbgQsKVxilJUS5mUEOkqIpyC1KDezBFX+FaM4B6OSMO8dkCk 8mXklcJteAR3BBHTE29fWIEeUJCKkpBoY3T9uvsC2jDNztvWN1Qz3Y5mepj6OKVA/sjl+4+M5 b6/eFT4ZVXf5QyP//xcTG3nNuT2KXi4MZdhgPWv9wdQPDcI3Z667+l61v45FpnmKcFbExV0VI ambnrm92DmZwz2to7TWhrv6/0/ba6/2Mi+0m3hi5uGz9g1CQe1NQaWT/4QdYt40732jkxJLcU aioRZzUXEiAB/ZiucFAwAA X-Env-Sender: remy@cloudvps.com X-Msg-Ref: server-7.tower-21.messagelabs.com!1480529624!46042817!1 X-Originating-IP: [81.4.66.226] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 14143 invoked from network); 30 Nov 2016 18:13:44 -0000 Received: from smtp01.it-ernity.nl (HELO smtp01.it-ernity.nl) (81.4.66.226) by server-7.tower-21.messagelabs.com with AES256-SHA encrypted SMTP; 30 Nov 2016 18:13:44 -0000 Received: from ex01.it-ernity.local (172.16.80.10) by ex01.it-ernity.local (172.16.80.10) with Microsoft SMTP Server (TLS) id 15.0.995.29; Wed, 30 Nov 2016 19:13:48 +0100 Received: from ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667]) by ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667%12]) with mapi id 15.00.0995.032; Wed, 30 Nov 2016 19:13:48 +0100 From: Remy van Elst To: Ian Jackson , "predisclosure-applications@lists.xenproject.org" Thread-Topic: [Predisclosure-applications] Application for the predisclosure list Thread-Index: AQHSSYZuylJrbcTDv0GTDGDN95huHKDxpZaAgAAyMFs= Date: Wed, 30 Nov 2016 18:13:47 +0000 Message-ID: <1480529622762.6296@cloudvps.com> References: <1480344519026.65758@cloudvps.com>, <22590.64175.36740.749641@mariner.uk.xensource.com> In-Reply-To: <22590.64175.36740.749641@mariner.uk.xensource.com> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [83.162.151.134] MIME-Version: 1.0 Subject: Re: [Predisclosure-applications] Application for the predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" SGkgSWFuLAoKVGhhbmsgeW91IGZvciB5b3VyIHRpbWUuIEknbGwgc29ydCB0aGlzIG91dCB3aXRo IG91ciBzZWN1cml0eSBvZmZpY2VyIGFuZCB3aWxsIGdldCBiYWNrIHRvIHRoZSBsaXN0IHNvb24u CgpSZW15Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRnJvbTogSWFu IEphY2tzb24gPGlhbi5qYWNrc29uQGV1LmNpdHJpeC5jb20+ClNlbnQ6IFdlZG5lc2RheSwgTm92 ZW1iZXIgMzAsIDIwMTYgNToxMyBQTQpUbzogUmVteSB2YW4gRWxzdApDYzogcHJlZGlzY2xvc3Vy ZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKU3ViamVjdDogUmU6IFtQcmVkaXNj bG9zdXJlLWFwcGxpY2F0aW9uc10gQXBwbGljYXRpb24gZm9yIHRoZSBwcmVkaXNjbG9zdXJlIGxp c3QKClJlbXkgdmFuIEVsc3Qgd3JpdGVzICgiW1ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zXSBB cHBsaWNhdGlvbiBmb3IgdGhlIHByZWRpc2Nsb3N1cmUgbGlzdCIpOgo+IEknbSB3cml0aW5nIG9u IGJlaGFsZiBvZiBteSBjb21wYW55IHdpdGggdGhlIHJlcXVlc3QgdG8gYmUgYWRkZWQgdG8KPiB0 aGUgcHJlLWRpc2Nsb3N1cmUgbGlzdC4gSSd2ZSBmaWxsZWQgaW4gdGhlIGluZm9ybWF0aW9uIG9u IHRoZQo+IHNlY3VyaXR5IHBvbGljeSBwYWdlIGhlcmUgYmVsb3cuCgpIaS4gIFRoYW5rcyBmb3Ig eW91ciBtYWlsLgoKV2UgYXJlIHNvcnJ5IHRvIHNheSB0aGF0IHlvdXIgYXBwbGljYXRpb24gZGlk IG5vdCBjb250YWluIGFsbCB0aGUgcmVxdWlyZWQKaW5mb3JtYXRpb24uIFdlIGFyZSBub3QgcGVy bWl0dGVkIHRvIHdhaXZlIHRoZSByZXF1aXJlbWVudHMgb2YgdGhlIHRoZSBYZW4KUHJvamVjdCBT ZWN1cml0eSBQb2xpY3kgd2hpY2ggaXMgZGVmaW5lZCBieSB0aGUgWGVuIFByb2plY3QgY29tbXVu aXR5IGFzIGEKd2hvbGUuCgo+ICAgICBJbmZvcm1hdGlvbiBhYm91dCB5b3VyIGhhbmRsaW5nIG9m IHNlY3VyaXR5IHByb2JsZW1zOgo+ICAgICAgICAgWW91ciBpbnZpdGF0aW9uIHRvIG1lbWJlcnMg b2YgdGhlIHB1YmxpYywgd2hvIGRpc2NvdmVyIHNlY3VyaXR5Cj4gcHJvYmxlbXMgd2l0aCB5b3Vy IHByb2R1Y3RzL3NlcnZpY2VzLCB0byByZXBvcnQgdGhlbSBpbiBjb25maWRlbmNlIHRvIHlvdTsK Pgo+ICAgICAgICAgU3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwg YWRkcmVzc2VzIG9yCj4gb3RoZXIgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBt ZW1iZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQKPiB1c2UuCj4KPiAgICAgICAgICAgICBUaGVyZSBp cyBubyBzcGVjaWZpYyByZXNwb25zaWJsZSBkaXNjbG9zdXJlIHBhZ2UsIGJ1dAo+IG91ciBjb250 YWN0IGRhdGEgaXMgbGlzdGVkIGhlcmUsIGluY2x1ZGluZyBlbWFpbCBhbmQgdGVsZXBob25lOgo+ Cj4gICAgICAgICAgICAgICAgIGh0dHA6Ly93d3cuY2xvdWR2cHMuY29tL2NvbnRhY3QKCkknbSBh ZnJhaWQgdGhhdCB0aGUgcG9saWN5IHJlcXVpcmVzIHVzIHRvIGxvb2sgZm9yCgogIFlvdXIgaW52 aXRhdGlvbiB0byBtZW1iZXJzIG9mIHRoZSBwdWJsaWMsIHdobyBkaXNjb3ZlciBzZWN1cml0eQog IHByb2JsZW1zIHdpdGggeW91ciBwcm9kdWN0cy9zZXJ2aWNlcywgdG8gcmVwb3J0IHRoZW0gaW4g Y29uZmlkZW5jZQogIHRvIHlvdQoKQXMgZmFyIGFzIHdlIGNhbiBzZWUsIHRoZSBnZW5lcmFsIGNv bnRhY3QgcGFnZSB5b3UgbWVudGlvbmVkIGRvZXMgbm90CmNvbnRhaW4gc3VjaCBhbiBpbnZpdGF0 aW9uLgoKRXZlcnl0aGluZyBlbHNlIGFib3V0IHlvdXIgYXBwbGljYXRpb24gYXBwZWFycyB0byBi ZSBzYXRpc2ZhY3RvcnksIHNvCmlmIHlvdSBjb3VsZCBwb2ludCB1cyB0byB0aGF0ICJpbnZpdGF0 aW9uIHRvIG1lbWJlcnMgb2YgdGhlIHB1YmxpYyIKcGFnZSwgd2Ugd291bGQgYmUgaGFwcHkgdG8g cHJvY2VzcyB5b3VyIGFwcGxpY2F0aW9uLgoKUmVnYXJkcywKSWFuCihvbiBiZWhhbGYgb2YgdGhl IFhlbiBQcm9qZWN0IFNlY3VyaXR5IFRlYW0pCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxp c3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnM= From predisclosure-applications-bounces@lists.xenproject.org Wed Nov 30 18:13:47 2016 Return-path: Envelope-to: archives@lists.xenproject.org Delivery-date: Wed, 30 Nov 2016 18:13:47 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC9O6-0001VK-U5; Wed, 30 Nov 2016 18:13:46 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cC9O5-0001VE-Ps for predisclosure-applications@lists.xenproject.org; Wed, 30 Nov 2016 18:13:45 +0000 Received: from [85.158.143.35] by server-7.bemta-6.messagelabs.com id D1/A3-29519-8D61F385; Wed, 30 Nov 2016 18:13:44 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrEIsWRWlGSWpSXmKPExsUSyOL0SPeGmH2 EwZnNUhb3mu4zOTB6HP5whSWAMYo1My8pvyKBNWPp/enMBacFK6Y+nsXSwHiOr4uRi0NIYA2j xJdX99khnJ2MEi9WrmLrYuTgYBNQl7jaLtvFyMkhIjCJUWL5rUwQW1ggUGLi3FNsEPEgibMbe lggbCuJ1sbHjCA2i4CqxIZtV5hAbF4BXYnrFzaC2UICSRIvdr1nBbE5BRwkljf/ApvDKCArsX h6C1gNs4C4xK0n88FsCQEBiSV7zjND2KISLx//Y4WwlSRe7W6DqteTuDF1ChuErS2xbOFrZoi 9ghInZz5hmcAoPAvJ2FlIWmYhaZmFpGUBI8sqRo3i1KKy1CJdQ1O9pKLM9IyS3MTMHF1DAzO9 3NTi4sT01JzEpGK95PzcTYzA8GcAgh2M35YFHGKU5GBSEuU9ymAfIcSXlJ9SmZFYnBFfVJqTW nyIUYaDQ0mCd58oUE6wKDU9tSItMwcYiTBpCQ4eJRHe+8JAad7igsTc4sx0iNQpRl2ON7tePm ASYsnLz0uVEuddBDJDAKQoozQPbgQsKVxilJUS5mUEOkqIpyC1KDezBFX+FaM4B6OSMO8dkCk 8mXklcJteAR3BBHTE29fWIEeUJCKkpBoY3T9uvsC2jDNztvWN1Qz3Y5mepj6OKVA/sjl+4+M5 b6/eFT4ZVXf5QyP//xcTG3nNuT2KXi4MZdhgPWv9wdQPDcI3Z667+l61v45FpnmKcFbExV0VI ambnrm92DmZwz2to7TWhrv6/0/ba6/2Mi+0m3hi5uGz9g1CQe1NQaWT/4QdYt40732jkxJLcU aioRZzUXEiAB/ZiucFAwAA X-Env-Sender: remy@cloudvps.com X-Msg-Ref: server-7.tower-21.messagelabs.com!1480529624!46042817!1 X-Originating-IP: [81.4.66.226] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.0.16; banners=-,-,- X-VirusChecked: Checked Received: (qmail 14143 invoked from network); 30 Nov 2016 18:13:44 -0000 Received: from smtp01.it-ernity.nl (HELO smtp01.it-ernity.nl) (81.4.66.226) by server-7.tower-21.messagelabs.com with AES256-SHA encrypted SMTP; 30 Nov 2016 18:13:44 -0000 Received: from ex01.it-ernity.local (172.16.80.10) by ex01.it-ernity.local (172.16.80.10) with Microsoft SMTP Server (TLS) id 15.0.995.29; Wed, 30 Nov 2016 19:13:48 +0100 Received: from ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667]) by ex01.it-ernity.local ([fe80::8c26:c1b5:acc7:8667%12]) with mapi id 15.00.0995.032; Wed, 30 Nov 2016 19:13:48 +0100 From: Remy van Elst To: Ian Jackson , "predisclosure-applications@lists.xenproject.org" Thread-Topic: [Predisclosure-applications] Application for the predisclosure list Thread-Index: AQHSSYZuylJrbcTDv0GTDGDN95huHKDxpZaAgAAyMFs= Date: Wed, 30 Nov 2016 18:13:47 +0000 Message-ID: <1480529622762.6296@cloudvps.com> References: <1480344519026.65758@cloudvps.com>, <22590.64175.36740.749641@mariner.uk.xensource.com> In-Reply-To: <22590.64175.36740.749641@mariner.uk.xensource.com> Accept-Language: en-US, nl-NL Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [83.162.151.134] MIME-Version: 1.0 Subject: Re: [Predisclosure-applications] Application for the predisclosure list X-BeenThere: predisclosure-applications@lists.xenproject.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: Applications for membership of Xen Security Advisories Pre-disclosure List List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: predisclosure-applications-bounces@lists.xenproject.org Sender: "Predisclosure-applications" SGkgSWFuLAoKVGhhbmsgeW91IGZvciB5b3VyIHRpbWUuIEknbGwgc29ydCB0aGlzIG91dCB3aXRo IG91ciBzZWN1cml0eSBvZmZpY2VyIGFuZCB3aWxsIGdldCBiYWNrIHRvIHRoZSBsaXN0IHNvb24u CgpSZW15Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KRnJvbTogSWFu IEphY2tzb24gPGlhbi5qYWNrc29uQGV1LmNpdHJpeC5jb20+ClNlbnQ6IFdlZG5lc2RheSwgTm92 ZW1iZXIgMzAsIDIwMTYgNToxMyBQTQpUbzogUmVteSB2YW4gRWxzdApDYzogcHJlZGlzY2xvc3Vy ZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKU3ViamVjdDogUmU6IFtQcmVkaXNj bG9zdXJlLWFwcGxpY2F0aW9uc10gQXBwbGljYXRpb24gZm9yIHRoZSBwcmVkaXNjbG9zdXJlIGxp c3QKClJlbXkgdmFuIEVsc3Qgd3JpdGVzICgiW1ByZWRpc2Nsb3N1cmUtYXBwbGljYXRpb25zXSBB cHBsaWNhdGlvbiBmb3IgdGhlIHByZWRpc2Nsb3N1cmUgbGlzdCIpOgo+IEknbSB3cml0aW5nIG9u IGJlaGFsZiBvZiBteSBjb21wYW55IHdpdGggdGhlIHJlcXVlc3QgdG8gYmUgYWRkZWQgdG8KPiB0 aGUgcHJlLWRpc2Nsb3N1cmUgbGlzdC4gSSd2ZSBmaWxsZWQgaW4gdGhlIGluZm9ybWF0aW9uIG9u IHRoZQo+IHNlY3VyaXR5IHBvbGljeSBwYWdlIGhlcmUgYmVsb3cuCgpIaS4gIFRoYW5rcyBmb3Ig eW91ciBtYWlsLgoKV2UgYXJlIHNvcnJ5IHRvIHNheSB0aGF0IHlvdXIgYXBwbGljYXRpb24gZGlk IG5vdCBjb250YWluIGFsbCB0aGUgcmVxdWlyZWQKaW5mb3JtYXRpb24uIFdlIGFyZSBub3QgcGVy bWl0dGVkIHRvIHdhaXZlIHRoZSByZXF1aXJlbWVudHMgb2YgdGhlIHRoZSBYZW4KUHJvamVjdCBT ZWN1cml0eSBQb2xpY3kgd2hpY2ggaXMgZGVmaW5lZCBieSB0aGUgWGVuIFByb2plY3QgY29tbXVu aXR5IGFzIGEKd2hvbGUuCgo+ICAgICBJbmZvcm1hdGlvbiBhYm91dCB5b3VyIGhhbmRsaW5nIG9m IHNlY3VyaXR5IHByb2JsZW1zOgo+ICAgICAgICAgWW91ciBpbnZpdGF0aW9uIHRvIG1lbWJlcnMg b2YgdGhlIHB1YmxpYywgd2hvIGRpc2NvdmVyIHNlY3VyaXR5Cj4gcHJvYmxlbXMgd2l0aCB5b3Vy IHByb2R1Y3RzL3NlcnZpY2VzLCB0byByZXBvcnQgdGhlbSBpbiBjb25maWRlbmNlIHRvIHlvdTsK Pgo+ICAgICAgICAgU3BlY2lmaWNhbGx5LCB0aGUgY29udGFjdCBpbmZvcm1hdGlvbiAoZW1haWwg YWRkcmVzc2VzIG9yCj4gb3RoZXIgY29udGFjdCBpbnN0cnVjdGlvbnMpIHdoaWNoIHN1Y2ggYSBt ZW1iZXIgb2YgdGhlIHB1YmxpYyBzaG91bGQKPiB1c2UuCj4KPiAgICAgICAgICAgICBUaGVyZSBp cyBubyBzcGVjaWZpYyByZXNwb25zaWJsZSBkaXNjbG9zdXJlIHBhZ2UsIGJ1dAo+IG91ciBjb250 YWN0IGRhdGEgaXMgbGlzdGVkIGhlcmUsIGluY2x1ZGluZyBlbWFpbCBhbmQgdGVsZXBob25lOgo+ Cj4gICAgICAgICAgICAgICAgIGh0dHA6Ly93d3cuY2xvdWR2cHMuY29tL2NvbnRhY3QKCkknbSBh ZnJhaWQgdGhhdCB0aGUgcG9saWN5IHJlcXVpcmVzIHVzIHRvIGxvb2sgZm9yCgogIFlvdXIgaW52 aXRhdGlvbiB0byBtZW1iZXJzIG9mIHRoZSBwdWJsaWMsIHdobyBkaXNjb3ZlciBzZWN1cml0eQog IHByb2JsZW1zIHdpdGggeW91ciBwcm9kdWN0cy9zZXJ2aWNlcywgdG8gcmVwb3J0IHRoZW0gaW4g Y29uZmlkZW5jZQogIHRvIHlvdQoKQXMgZmFyIGFzIHdlIGNhbiBzZWUsIHRoZSBnZW5lcmFsIGNv bnRhY3QgcGFnZSB5b3UgbWVudGlvbmVkIGRvZXMgbm90CmNvbnRhaW4gc3VjaCBhbiBpbnZpdGF0 aW9uLgoKRXZlcnl0aGluZyBlbHNlIGFib3V0IHlvdXIgYXBwbGljYXRpb24gYXBwZWFycyB0byBi ZSBzYXRpc2ZhY3RvcnksIHNvCmlmIHlvdSBjb3VsZCBwb2ludCB1cyB0byB0aGF0ICJpbnZpdGF0 aW9uIHRvIG1lbWJlcnMgb2YgdGhlIHB1YmxpYyIKcGFnZSwgd2Ugd291bGQgYmUgaGFwcHkgdG8g cHJvY2VzcyB5b3VyIGFwcGxpY2F0aW9uLgoKUmVnYXJkcywKSWFuCihvbiBiZWhhbGYgb2YgdGhl IFhlbiBQcm9qZWN0IFNlY3VyaXR5IFRlYW0pCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXwpQcmVkaXNjbG9zdXJlLWFwcGxpY2F0aW9ucyBtYWlsaW5nIGxp c3QKUHJlZGlzY2xvc3VyZS1hcHBsaWNhdGlvbnNAbGlzdHMueGVucHJvamVjdC5vcmcKaHR0cHM6 Ly9saXN0cy54ZW5wcm9qZWN0Lm9yZy9jZ2ktYmluL21haWxtYW4vbGlzdGluZm8vcHJlZGlzY2xv c3VyZS1hcHBsaWNhdGlvbnM=