15:00:20 #startmeeting security 15:00:21 Meeting started Thu Dec 3 15:00:20 2020 UTC and is due to finish in 60 minutes. The chair is gagehugo. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:00:22 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:00:24 The meeting name has been set to 'security' 15:00:34 #link https://etherpad.opendev.org/p/security-agenda agenda 15:00:43 o/ 15:01:25 ohai 15:03:57 #topic Dec meetings cancelled 15:04:04 good idea 15:04:08 We will meet next week, but I'll be out after that 15:04:25 there likely won't be a ton going on anyway 15:04:33 So I was going to cancel the 17th, 24th, and 31st 15:04:45 project activity seems to slow significantly in december 15:05:08 as well as my brain activity 15:05:41 just slows down as the weather gets cold 15:06:56 #topic open discussion 15:07:06 fungi: do you have anything for this week? 15:07:11 when was our last meeting? 15:07:21 good question 15:07:29 trying to remember how far back to look for stuff which became public since then 15:07:30 Nov 12th 15:07:42 I've been out for the past 2 weeks 15:08:19 the answer seems to be "nothing" 15:08:52 that's easy 15:09:17 the tc did however confirm all official projects have completed a review of commits to their deliverable repositories for the worrisome couple of weeks during the gerrit breach 15:10:21 in related news, several of the opendev sysadmins have been experimenting with the two-factor auth beta feature in launchpad/ubuntuone sso 15:10:22 oh nice 15:11:36 we'll look at providing easy ways for our users to start enabling that soon too if they want it 15:12:07 i got it working with a pair of purism "librem key" devices, i think some others have used yubikeys or otp phone apps 15:12:38 hmm ok 15:15:06 i don't think i have anything else of security interest to bring up right now, most of my time has been spent on gerrit upgrade work 15:15:59 ok 15:16:11 thanks fungi! Have a good rest of the week! 15:16:14 #endmeeting