Re: [Predisclosure-applications] Pre-disclosure list application for gt.net

[Ian Campbell <ijc@xxxxxxx>]

Hi Nathan,

Our records show that your application was processed on Wednesday 4th
and that you were added to the list at the time. It seems no manual
notification was sent but you should have received an automated
subscription notification to your noc@xxxxxx address, as well as copies
of the (at the time) outstanding embargoed issues XSA-119,120,121,122
and 123.

Did you not receive those copies? The XSA-121 copy had message-id
<E1YT8Md-0006i8-5L@xxxxxxxxxxxxxxx> and was dated "Wed, 4 Mar 2015
12:25:23 +0000".

Ian.

On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote:
> Hi,
> 
> Just following up here to see if any additional info is required? Probably 
> too late to make it on the list priority to the upcoming releases, but still 
> would like to be on the list for future XSA's.
> 
> Thanks!
> 
> - Nathan
> 
> 
> > -----Original Message-----
> > From: Nathan March [mailto:nathan@xxxxxx]
> > Sent: Tuesday, March 3, 2015 12:05 PM
> > To: 'Ian Campbell'
> > Cc: 'predisclosure-applications@xxxxxxxxxxxxxxxxxxxx'
> > Subject: RE: [Predisclosure-applications] Pre-disclosure list application 
> > for
> > gt.net
> > 
> > Hi Ian,
> > 
> > The noc@xxxxxx address goes only to our me (noc manager) and our CEO.
> > 
> > * Evidence of your status as a service/software provider:
> > * Evidence of your status as a user/distributor of Xen:
> > 
> > https://gt.net/cloud/
> > 
> > * Information about your handling of security problems:
> > 
> > Security contact details are listed on both our contact + support pages:
> > 
> > http://gt.net/contact/
> > http://gt.net/support/
> > 
> > - Nathan
> > 
> > > -----Original Message-----
> > > From: Ian Campbell [mailto:ijc@xxxxxxx]
> > > Sent: Tuesday, March 3, 2015 8:10 AM
> > > To: Nathan March
> > > Cc: predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> > > Subject: Re: [Predisclosure-applications] Pre-disclosure list
> > > application for gt.net
> > >
> > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote:
> > > > Would like to apply for access to the predisclosure list please.
> > >
> > > Hi,
> > >
> > > Thank you for your application.
> > >
> > > The security policy[0] requires "Link(s) to current public web pages,
> > > belonging to your organisation," for each piece of information, which
> > > you have not provided here for
> > >       * Evidence of your status as a service/software provider:
> > >       * Evidence of your status as a user/distributor of Xen:
> > >       * Information about your handling of security problems:
> > >
> > > Please can you provide these links so that we may continue to process
> > > your application. Note that as regards pricing the policy includes "or
> > > how to get a quote".
> > >
> > > Please could you also clarify the scope of your noc@ alias. It is
> > > intended that predisclosures go to a small team dedicated to handling
> > > incoming security issues, rather than a large team of system 
> > > administrators.
> > >
> > > Thanks,
> > > Ian.
> > >
> > > [0] http://www.xenproject.org/security-policy.html
> 
> 
> _______________________________________________
> Predisclosure-applications mailing list
> Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications



_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications