[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Predisclosure-applications] Pre-disclosure list application for gt.net


  • To: "'Ian Campbell'" <ijc@xxxxxxx>
  • From: "Nathan March" <nathan@xxxxxx>
  • Date: Mon, 9 Mar 2015 10:16:56 -0700
  • Cc: predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
  • Delivery-date: Mon, 09 Mar 2015 17:17:04 +0000
  • Domainkey-signature: a=rsa-sha1; c=nofws; d=gt.net; h=from:to:cc :references:in-reply-to:subject:date:message-id:mime-version :content-type:content-transfer-encoding; q=dns; s=mail; b=hm6HPK SC63cJhPWX00uusWm9JLDIiDTP2ORch3oIcoKlDvzibW5MZlYBWFmJGj/cHkkYcO HQZi53dmOoBKUhFIomk+CDGMFETKiDGL4qJ/9E8z1u4OKkzVN1A++6w39EZovnS5 pywPrF2CMwVmqwFFfvYlbEmyOW7KEzMX+UOAU=
  • List-id: Applications for membership of Xen Security Advisories Pre-disclosure List <predisclosure-applications.lists.xenproject.org>
  • Thread-index: AQKACgIG/4e5T4y78BOZ0SMHY+pKiQJXpFIyAwD9uhABtc1v+Zt8kfyw

Hi Ian,

Thanks for the quick response. Looks like there was a misconfig on that mail 
alias so that email bounced, I've fixed it up now. Could you please resend the 
XSA's?

Thanks!

- Nathan

> -----Original Message-----
> From: Ian Campbell [mailto:ijc@xxxxxxx]
> Sent: Monday, March 9, 2015 10:14 AM
> To: Nathan March
> Cc: predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> Subject: Re: [Predisclosure-applications] Pre-disclosure list application for
> gt.net
> 
> Hi Nathan,
> 
> Our records show that your application was processed on Wednesday 4th
> and that you were added to the list at the time. It seems no manual
> notification was sent but you should have received an automated
> subscription notification to your noc@xxxxxx address, as well as copies of the
> (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123.
> 
> Did you not receive those copies? The XSA-121 copy had message-id
> <E1YT8Md-0006i8-5L@xxxxxxxxxxxxxxx> and was dated "Wed, 4 Mar 2015
> 12:25:23 +0000".
> 
> Ian.
> 
> On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote:
> > Hi,
> >
> > Just following up here to see if any additional info is required? Probably 
> > too
> late to make it on the list priority to the upcoming releases, but still 
> would like
> to be on the list for future XSA's.
> >
> > Thanks!
> >
> > - Nathan
> >
> >
> > > -----Original Message-----
> > > From: Nathan March [mailto:nathan@xxxxxx]
> > > Sent: Tuesday, March 3, 2015 12:05 PM
> > > To: 'Ian Campbell'
> > > Cc: 'predisclosure-applications@xxxxxxxxxxxxxxxxxxxx'
> > > Subject: RE: [Predisclosure-applications] Pre-disclosure list
> > > application for gt.net
> > >
> > > Hi Ian,
> > >
> > > The noc@xxxxxx address goes only to our me (noc manager) and our CEO.
> > >
> > > * Evidence of your status as a service/software provider:
> > > * Evidence of your status as a user/distributor of Xen:
> > >
> > > https://gt.net/cloud/
> > >
> > > * Information about your handling of security problems:
> > >
> > > Security contact details are listed on both our contact + support pages:
> > >
> > > http://gt.net/contact/
> > > http://gt.net/support/
> > >
> > > - Nathan
> > >
> > > > -----Original Message-----
> > > > From: Ian Campbell [mailto:ijc@xxxxxxx]
> > > > Sent: Tuesday, March 3, 2015 8:10 AM
> > > > To: Nathan March
> > > > Cc: predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list
> > > > application for gt.net
> > > >
> > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote:
> > > > > Would like to apply for access to the predisclosure list please.
> > > >
> > > > Hi,
> > > >
> > > > Thank you for your application.
> > > >
> > > > The security policy[0] requires "Link(s) to current public web
> > > > pages, belonging to your organisation," for each piece of
> > > > information, which you have not provided here for
> > > >       * Evidence of your status as a service/software provider:
> > > >       * Evidence of your status as a user/distributor of Xen:
> > > >       * Information about your handling of security problems:
> > > >
> > > > Please can you provide these links so that we may continue to
> > > > process your application. Note that as regards pricing the policy
> > > > includes "or how to get a quote".
> > > >
> > > > Please could you also clarify the scope of your noc@ alias. It is
> > > > intended that predisclosures go to a small team dedicated to
> > > > handling incoming security issues, rather than a large team of system
> administrators.
> > > >
> > > > Thanks,
> > > > Ian.
> > > >
> > > > [0] http://www.xenproject.org/security-policy.html
> >
> >
> > _______________________________________________
> > Predisclosure-applications mailing list
> > Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-
> applications


_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.