Re: [Predisclosure-applications] Pre-disclosure list application for gt.net

[Ian Campbell <ijc@xxxxxxx>]

I've resent copies of XSA -119, -120, -123 and -124. The others are
public already. See http://xenbits.xen.org/xsa/.

Ian.

On Mon, 2015-03-09 at 10:16 -0700, Nathan March wrote:
> Hi Ian,
> 
> Thanks for the quick response. Looks like there was a misconfig on that mail 
> alias so that email bounced, I've fixed it up now. Could you please resend 
> the XSA's?
> 
> Thanks!
> 
> - Nathan
> 
> > -----Original Message-----
> > From: Ian Campbell [mailto:ijc@xxxxxxx]
> > Sent: Monday, March 9, 2015 10:14 AM
> > To: Nathan March
> > Cc: predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> > Subject: Re: [Predisclosure-applications] Pre-disclosure list application 
> > for
> > gt.net
> > 
> > Hi Nathan,
> > 
> > Our records show that your application was processed on Wednesday 4th
> > and that you were added to the list at the time. It seems no manual
> > notification was sent but you should have received an automated
> > subscription notification to your noc@xxxxxx address, as well as copies of 
> > the
> > (at the time) outstanding embargoed issues XSA-119,120,121,122 and 123.
> > 
> > Did you not receive those copies? The XSA-121 copy had message-id
> > <E1YT8Md-0006i8-5L@xxxxxxxxxxxxxxx> and was dated "Wed, 4 Mar 2015
> > 12:25:23 +0000".
> > 
> > Ian.
> > 
> > On Mon, 2015-03-09 at 10:02 -0700, Nathan March wrote:
> > > Hi,
> > >
> > > Just following up here to see if any additional info is required? 
> > > Probably too
> > late to make it on the list priority to the upcoming releases, but still 
> > would like
> > to be on the list for future XSA's.
> > >
> > > Thanks!
> > >
> > > - Nathan
> > >
> > >
> > > > -----Original Message-----
> > > > From: Nathan March [mailto:nathan@xxxxxx]
> > > > Sent: Tuesday, March 3, 2015 12:05 PM
> > > > To: 'Ian Campbell'
> > > > Cc: 'predisclosure-applications@xxxxxxxxxxxxxxxxxxxx'
> > > > Subject: RE: [Predisclosure-applications] Pre-disclosure list
> > > > application for gt.net
> > > >
> > > > Hi Ian,
> > > >
> > > > The noc@xxxxxx address goes only to our me (noc manager) and our CEO.
> > > >
> > > > * Evidence of your status as a service/software provider:
> > > > * Evidence of your status as a user/distributor of Xen:
> > > >
> > > > https://gt.net/cloud/
> > > >
> > > > * Information about your handling of security problems:
> > > >
> > > > Security contact details are listed on both our contact + support pages:
> > > >
> > > > http://gt.net/contact/
> > > > http://gt.net/support/
> > > >
> > > > - Nathan
> > > >
> > > > > -----Original Message-----
> > > > > From: Ian Campbell [mailto:ijc@xxxxxxx]
> > > > > Sent: Tuesday, March 3, 2015 8:10 AM
> > > > > To: Nathan March
> > > > > Cc: predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> > > > > Subject: Re: [Predisclosure-applications] Pre-disclosure list
> > > > > application for gt.net
> > > > >
> > > > > On Mon, 2015-03-02 at 15:17 -0800, Nathan March wrote:
> > > > > > Would like to apply for access to the predisclosure list please.
> > > > >
> > > > > Hi,
> > > > >
> > > > > Thank you for your application.
> > > > >
> > > > > The security policy[0] requires "Link(s) to current public web
> > > > > pages, belonging to your organisation," for each piece of
> > > > > information, which you have not provided here for
> > > > >       * Evidence of your status as a service/software provider:
> > > > >       * Evidence of your status as a user/distributor of Xen:
> > > > >       * Information about your handling of security problems:
> > > > >
> > > > > Please can you provide these links so that we may continue to
> > > > > process your application. Note that as regards pricing the policy
> > > > > includes "or how to get a quote".
> > > > >
> > > > > Please could you also clarify the scope of your noc@ alias. It is
> > > > > intended that predisclosures go to a small team dedicated to
> > > > > handling incoming security issues, rather than a large team of system
> > administrators.
> > > > >
> > > > > Thanks,
> > > > > Ian.
> > > > >
> > > > > [0] http://www.xenproject.org/security-policy.html
> > >
> > >
> > > _______________________________________________
> > > Predisclosure-applications mailing list
> > > Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
> > > http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-
> > applications
> 
> 



_______________________________________________
Predisclosure-applications mailing list
Predisclosure-applications@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/predisclosure-applications