Monday, 2014-09-08

*** elo1 has quit IRC01:35
*** elo1 has joined #openstack-security01:36
openstackgerritDeepti Navale proposed a change to openstack/security-doc: Included info about Federated Identity  https://review.openstack.org/11823701:44
*** nkinder has joined #openstack-security02:32
*** elo1 has quit IRC02:38
*** nkinder has quit IRC02:59
*** dmccowan has quit IRC03:12
*** bdpayne has joined #openstack-security03:12
*** elo1 has joined #openstack-security03:16
*** bdpayne has quit IRC03:33
*** voodookid has joined #openstack-security03:36
*** voodookid has quit IRC04:02
*** elo1 has quit IRC04:22
*** sewerrat55 has joined #openstack-security05:25
*** sewerrat55 has left #openstack-security05:27
*** elo1 has joined #openstack-security06:43
openstackgerritOpenStack Proposal Bot proposed a change to openstack/security-doc: Updated from openstack-manuals  https://review.openstack.org/11970306:53
openstackgerritA change was merged to openstack/security-doc: Updated from openstack-manuals  https://review.openstack.org/11970307:13
openstackgerritDeepti Navale proposed a change to openstack/security-doc: Included info about Federated Identity  https://review.openstack.org/11823707:19
*** paulmo has quit IRC09:08
openstackgerritTim Kelsey proposed a change to openstack/security-doc: Adding OSSN-0027 - Neutron ARP cache poisoning vulnerability.  https://review.openstack.org/11935309:29
*** voodookid has joined #openstack-security09:35
*** voodookid has quit IRC09:40
*** elo1 has quit IRC09:49
openstackgerritTim Kelsey proposed a change to openstack/security-doc: Adding OSSN-0027 - Neutron ARP cache poisoning vulnerability.  https://review.openstack.org/11935310:20
*** dmccowan has joined #openstack-security12:21
*** dmccowan has quit IRC12:41
*** dmccowan has joined #openstack-security12:41
*** amrith is now known as _amrith_12:47
*** paulmo has joined #openstack-security13:17
*** bknudson has quit IRC13:25
*** dmccowan has quit IRC13:36
*** bknudson has joined #openstack-security13:46
*** dmccowan has joined #openstack-security13:51
*** salv-orlando has joined #openstack-security13:58
*** nkinder has joined #openstack-security14:00
*** voodookid has joined #openstack-security14:09
*** _amrith_ is now known as amrith14:13
*** tmcpeak has joined #openstack-security14:45
*** salv-orlando has quit IRC15:14
*** amrith is now known as _amrith_15:20
*** elo1 has joined #openstack-security15:36
*** elo1 has quit IRC15:45
*** salv-orlando has joined #openstack-security15:48
*** bdpayne has joined #openstack-security15:57
tmcpeakwhere's your op bdpayne?15:59
bdpayneit goes away every time I log out15:59
bdpayneI need to configure my client ;-)16:00
tmcpeakscript it ?16:00
tmcpeak;)16:00
paulmoHe is honey potting the spammers :)16:00
bdpayneyeah... just a matter of remembering to do it16:00
tmcpeakyeah, "it's fine, there's no ops here"16:00
tmcpeakHOLA16:00
bdpayneheh16:00
*** _amrith_ is now known as amrith16:02
*** gabriela has joined #openstack-security16:07
tmcpeakspeak of the devil16:09
*** gabriela has left #openstack-security16:09
paulmoheh, how ironic16:09
tmcpeaklol, yep16:10
*** bdpayne has quit IRC16:11
*** bdpayne has joined #openstack-security16:11
*** ChanServ sets mode: +o bdpayne16:13
*** ChanServ sets mode: +o bdpayne16:13
*** paulmo has quit IRC16:16
*** bdpayne has quit IRC16:16
tmcpeaknkinder: you around?16:42
*** paulmo has joined #openstack-security16:51
*** gabriela has joined #openstack-security17:22
*** bdpayne has joined #openstack-security17:23
*** gabriela has left #openstack-security17:24
*** bdpayne has quit IRC17:50
*** bdpayne has joined #openstack-security17:51
*** bdpayne has quit IRC18:10
*** bdpayne has joined #openstack-security18:11
tmcpeaknkinder: ..? meeting bound?18:31
nkindertmcpeak: story of my life on Monday...18:32
nkindertmcpeak: what's up?18:32
tmcpeaklol18:36
tmcpeaknkinder: so what's the deal with OSSN on something that is being actively fixed and may be backported18:37
tmcpeakdo we release it and then yank it later, or mention in the note that it's been fixed18:37
tmcpeakor should we not release such a note18:37
nkindertmcpeak: well, that's a tough one.  If it's being fixed and backported, we shouldn't need to note it18:37
tmcpeakOSSN-002718:37
tmcpeakTim Kelsey is working on it18:37
nkindertmcpeak: unless we want to call out the maintenance release it's fixed in18:37
nkindertmcpeak: link?18:38
tmcpeakit's unknown if it will be backported yet18:38
tmcpeakone sec18:38
nkindertmcpeak: I can be non-lazy and look it up myself too... ;)18:38
tmcpeaknkinder: https://review.openstack.org/#/c/119353/18:38
openstackgerritPriti Desai proposed a change to openstack/security-doc: Adding note for OSSN-0020  https://review.openstack.org/11342218:40
nkindertmcpeak: ok, so I think the deal is that we want to raise awareness.  It looks like they plan to fix it in Neutron, but who knows how long that will take.18:43
tmcpeaknkinder: yeah, makes sense18:43
nkindertmcpeak: so we can modify the notes after publishing to call out the stable update that fixes it18:43
tmcpeakbut what about when it is fixed and backported?18:43
tmcpeakok18:43
nkindertmcpeak: heh, beat you18:44
tmcpeaklol18:44
tmcpeakI think there should be some way to call attention right at the top that it's been fixed with a patch18:44
tmcpeakso people don't have to read a bunch if they don't need to18:44
*** edmondsw has joined #openstack-security18:44
nkindertmcpeak: yeah, we'll have to think of the best way to call that out18:45
tmcpeaknkinder: ok cool18:46
tmcpeaknkinder: also, Bandit is in a pretty good state18:46
tmcpeaknkinder: I'm done with the improvements for now18:46
tmcpeakchair6 is going to see about getting it in Gerrit18:47
tmcpeakwe put the three of us as authors18:47
*** robemcallister has joined #openstack-security18:47
nkindertmcpeak: cool, in stackforge?18:47
tmcpeakyep18:47
*** dcdamien1 has joined #openstack-security18:50
*** dcdamien1 has left #openstack-security18:50
*** openstackgerrit has quit IRC18:51
*** robemcallister has quit IRC18:53
*** tmcpeak has quit IRC19:00
*** openstackgerrit has joined #openstack-security19:07
*** tmcpeak has joined #openstack-security19:09
tmcpeaknkinder: did you send out to sec list about OSSN-0026?19:15
tmcpeakI didn't see it19:15
*** dmccowan has quit IRC19:21
nkindertmcpeak: I don't usually send them to sec list.  They get published to openstack and openstack-dev19:30
tmcpeakoh, openstack dev19:30
tmcpeakI haven't signed back up for that yet19:30
openstackgerritPriti Desai proposed a change to openstack/security-doc: Making section id names readable in security guide  https://review.openstack.org/11988919:33
*** dmccowan has joined #openstack-security19:38
*** salv-orlando has quit IRC19:40
openstackgerritPriti Desai proposed a change to openstack/security-doc: Making section id names readable in security guide  https://review.openstack.org/11988919:42
*** dmccowan_ has joined #openstack-security19:47
*** dmccowan has quit IRC19:49
*** dmccowan_ is now known as dmccowan19:49
*** amrith is now known as _amrith_20:13
openstackgerritPriti Desai proposed a change to openstack/security-doc: Making section id names readable in security guide  https://review.openstack.org/11988920:26
*** bdpayne_ has joined #openstack-security20:33
*** ChanServ sets mode: +o bdpayne20:33
*** bdpayne has quit IRC20:36
openstackgerritAbu Shohel Ahmed proposed a change to openstack/security-doc: Adds a new OpenStack Security Notes  https://review.openstack.org/11446021:01
openstackgerritAbu Shohel Ahmed proposed a change to openstack/security-doc: Adds a new OpenStack Security Notes  https://review.openstack.org/11446021:09
*** edmondsw has quit IRC21:15
*** bdpayne_ has quit IRC21:35
*** bdpayne has joined #openstack-security21:37
*** paulmo has quit IRC21:42
openstackgerritDeepti Navale proposed a change to openstack/security-doc: Included info about Federated Identity  https://review.openstack.org/11823722:43
*** bknudson has quit IRC22:49
*** tmcpeak has quit IRC22:56
*** voodookid has quit IRC23:05
*** voodookid has joined #openstack-security23:38
*** _amrith_ is now known as amrith23:38
*** nkinder has quit IRC23:42
*** bdpayne has quit IRC23:44
*** bdpayne has joined #openstack-security23:45
*** voodookid has quit IRC23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!