15:00:20 <gagehugo> #startmeeting security 15:00:21 <openstack> Meeting started Thu Dec 3 15:00:20 2020 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:22 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:24 <openstack> The meeting name has been set to 'security' 15:00:34 <gagehugo> #link https://etherpad.opendev.org/p/security-agenda agenda 15:00:43 <gagehugo> o/ 15:01:25 <fungi> ohai 15:03:57 <gagehugo> #topic Dec meetings cancelled 15:04:04 <fungi> good idea 15:04:08 <gagehugo> We will meet next week, but I'll be out after that 15:04:25 <fungi> there likely won't be a ton going on anyway 15:04:33 <gagehugo> So I was going to cancel the 17th, 24th, and 31st 15:04:45 <fungi> project activity seems to slow significantly in december 15:05:08 <gagehugo> as well as my brain activity 15:05:41 <gagehugo> just slows down as the weather gets cold 15:06:56 <gagehugo> #topic open discussion 15:07:06 <gagehugo> fungi: do you have anything for this week? 15:07:11 <fungi> when was our last meeting? 15:07:21 <gagehugo> good question 15:07:29 <fungi> trying to remember how far back to look for stuff which became public since then 15:07:30 <gagehugo> Nov 12th 15:07:42 <gagehugo> I've been out for the past 2 weeks 15:08:19 <fungi> the answer seems to be "nothing" 15:08:52 <gagehugo> that's easy 15:09:17 <fungi> the tc did however confirm all official projects have completed a review of commits to their deliverable repositories for the worrisome couple of weeks during the gerrit breach 15:10:21 <fungi> in related news, several of the opendev sysadmins have been experimenting with the two-factor auth beta feature in launchpad/ubuntuone sso 15:10:22 <gagehugo> oh nice 15:11:36 <fungi> we'll look at providing easy ways for our users to start enabling that soon too if they want it 15:12:07 <fungi> i got it working with a pair of purism "librem key" devices, i think some others have used yubikeys or otp phone apps 15:12:38 <gagehugo> hmm ok 15:15:06 <fungi> i don't think i have anything else of security interest to bring up right now, most of my time has been spent on gerrit upgrade work 15:15:59 <gagehugo> ok 15:16:11 <gagehugo> thanks fungi! Have a good rest of the week! 15:16:14 <gagehugo> #endmeeting