| *** m8 has joined #zope | 00:04 | |
| *** mpj17 has joined #zope | 00:14 | |
| *** Jan_Garaj3 has joined #zope | 00:20 | |
| *** chrstphrhrt has joined #zope | 01:04 | |
| *** J1m has quit IRC | 01:32 | |
| *** J1m has joined #zope | 01:33 | |
| *** m8 has quit IRC | 01:58 | |
| *** Jan_Garaj3 has quit IRC | 01:59 | |
| *** chrstphrhrt has quit IRC | 02:04 | |
| *** J1m has quit IRC | 02:21 | |
| *** mpj17 has quit IRC | 03:08 | |
| *** mpj17 has joined #zope | 03:09 | |
| *** MatthewWilkes has quit IRC | 03:16 | |
| *** MatthewWilkes has joined #zope | 03:20 | |
| *** benji has quit IRC | 03:35 | |
| *** jham has quit IRC | 03:35 | |
| *** gawel has quit IRC | 03:35 | |
| *** ree has quit IRC | 03:35 | |
| *** menesis has quit IRC | 03:35 | |
| *** mpj17 has quit IRC | 03:36 | |
| *** benji has joined #zope | 03:39 | |
| *** ree has joined #zope | 03:39 | |
| *** jham has joined #zope | 03:39 | |
| *** gawel has joined #zope | 03:39 | |
| *** benji has quit IRC | 03:40 | |
| *** jham has quit IRC | 03:40 | |
| *** gawel has quit IRC | 03:40 | |
| *** ree has quit IRC | 03:40 | |
| *** benji has joined #zope | 03:41 | |
| *** ree has joined #zope | 03:41 | |
| *** jham has joined #zope | 03:41 | |
| *** gawel has joined #zope | 03:41 | |
| *** mpj17 has joined #zope | 04:16 | |
| *** mpj17 has quit IRC | 04:27 | |
| *** mpj17 has joined #zope | 04:40 | |
| *** yvl has quit IRC | 04:42 | |
| *** mpj17 has quit IRC | 04:43 | |
| *** mpj17 has joined #zope | 04:43 | |
| *** mpj17 has quit IRC | 05:03 | |
| *** mpj17 has joined #zope | 05:03 | |
| *** mpj17 has quit IRC | 05:08 | |
| *** alecm has quit IRC | 06:21 | |
| *** povbot has joined #zope | 06:38 | |
| *** mgedmin has joined #zope | 06:39 | |
| *** alecm has joined #zope | 06:58 | |
| *** alecm has joined #zope | 06:58 | |
| *** alecm has quit IRC | 07:07 | |
| *** alecm has joined #zope | 07:07 | |
| *** alecm has quit IRC | 08:28 | |
| *** alecm has joined #zope | 08:33 | |
| *** alecm has joined #zope | 08:33 | |
| *** alecm has quit IRC | 08:51 | |
| *** alecm has joined #zope | 08:52 | |
| *** alecm has joined #zope | 08:52 | |
| *** alecm has quit IRC | 08:55 | |
| *** alecm has joined #zope | 08:56 | |
| *** alecm has joined #zope | 08:56 | |
| *** alecm has quit IRC | 09:07 | |
| *** alecm has joined #zope | 09:10 | |
| *** alecm has joined #zope | 09:10 | |
| *** __mac__ has joined #zope | 09:27 | |
| *** Jan_Garaj3 has joined #zope | 09:42 | |
| *** tisto has joined #zope | 09:54 | |
| *** do3cc has quit IRC | 10:06 | |
| *** do3cc has joined #zope | 10:12 | |
| *** MrTango has joined #zope | 10:16 | |
| *** giacomos has joined #zope | 10:30 | |
| *** bosim has joined #zope | 10:46 | |
| *** bosim has quit IRC | 10:59 | |
| *** maurits has joined #zope | 11:01 | |
| *** bosim has joined #zope | 11:02 | |
| *** Jan_Garaj3_ has joined #zope | 11:24 | |
| *** Jan_Garaj3 has quit IRC | 11:26 | |
| *** Jan_Garaj3_ has quit IRC | 11:29 | |
| *** menesis has joined #zope | 11:36 | |
| *** bosim has quit IRC | 11:41 | |
| *** bosim has joined #zope | 11:44 | |
| *** bosim has quit IRC | 11:44 | |
| *** jakke has joined #zope | 11:45 | |
| *** bosim has joined #zope | 11:49 | |
| *** KageSenshi has quit IRC | 12:35 | |
| *** m8 has joined #zope | 12:52 | |
| *** giacomos has quit IRC | 12:54 | |
| *** giacomos has joined #zope | 12:55 | |
| *** Jan_Garaj3 has joined #zope | 13:01 | |
| *** menesis has quit IRC | 13:42 | |
| *** MatthewWilkes has quit IRC | 13:44 | |
| *** Jan_Garaj3 has quit IRC | 13:45 | |
| *** KageSenshi has joined #zope | 13:49 | |
| *** __mac__ has quit IRC | 14:00 | |
| *** __mac__ has joined #zope | 14:02 | |
| *** __mac__ has joined #zope | 14:05 | |
| *** m8 has quit IRC | 14:43 | |
| *** MatzeWilkes has joined #zope | 14:52 | |
| *** menesis has joined #zope | 14:55 | |
| *** __mac__ has quit IRC | 15:00 | |
| *** J1m has joined #zope | 15:03 | |
| *** __mac__ has joined #zope | 15:04 | |
| *** __mac__ has quit IRC | 15:18 | |
| *** MrTango has quit IRC | 15:22 | |
| J1m | sm, di you know how to rescue the wiki? | 15:26 |
|---|---|---|
| J1m | s/di/do | 15:26 |
| *** __mac__ has joined #zope | 15:29 | |
| *** projekt01 has joined #zope | 15:44 | |
| *** MrTango has joined #zope | 15:44 | |
| *** yvl has joined #zope | 15:55 | |
| *** Jan_Garaj3 has joined #zope | 16:44 | |
| *** tisto has quit IRC | 17:06 | |
| *** chrstphrhrt has joined #zope | 17:19 | |
| *** Jan_Garaj3 has quit IRC | 17:27 | |
| *** fdrake has quit IRC | 17:52 | |
| *** kseifried has joined #zope | 18:09 | |
| kseifried | Hi I reported a security issue to security@zope.org, is that email box monitoeed at all? is there a better way to report a security issue? | 18:10 |
| *** Jan_Garaj3 has joined #zope | 18:10 | |
| *** chrstphrhrt has quit IRC | 18:11 | |
| *** bosim has quit IRC | 18:13 | |
| *** Jan_Garaj3 has quit IRC | 18:16 | |
| kseifried | anyone know about the process to report a security flaw to zope? | 18:33 |
| *** __mac__ has quit IRC | 18:50 | |
| *** projekt01 has quit IRC | 18:55 | |
| *** MrTango has quit IRC | 19:12 | |
| *** MatzeWilkes is now known as MatthewWilkes | 19:21 | |
| *** giacomos has quit IRC | 19:23 | |
| J1m | kseifried, send to security-response@zope.org | 19:53 |
| J1m | Thanks for reporting. | 19:53 |
| kseifried | jl you guys need to put that email on your website/etc | 19:54 |
| *** maurits1 has joined #zope | 20:02 | |
| *** maurits has quit IRC | 20:03 | |
| *** alecm has quit IRC | 20:16 | |
| *** alecm has joined #zope | 20:17 | |
| MatthewWilkes | J1m: Are we not using launchpad anymore? | 20:21 |
| kseifried | J1m / MatthewWilkes you guys need to put your security contact onto the zope web pages | 20:37 |
| kseifried | I emailed security@ previously and assumed it was being ignored/no-one cared | 20:37 |
| kseifried | and/or start using the security@ email since it appears to be active (doesn't bounce at least) | 20:37 |
| MatthewWilkes | J1m: Can you edit the website? | 20:38 |
| J1m | kseifried, sorry | 20:38 |
| *** Jan_Garaj3 has joined #zope | 20:38 | |
| J1m | MatthewWilkes, I don't have any idea how to edit it. | 20:38 |
| J1m | It may also be that there's another procedure. | 20:38 |
| J1m | zope.org infrastructure is a bit of a disaster. | 20:39 |
| kseifried | it doesn't show up in google anywhere so... yeah. | 20:39 |
| J1m | kseifried, where did you find instructions for reporting security problems? | 20:40 |
| kseifried | UI didn't | 20:40 |
| kseifried | that's the problem | 20:40 |
| kseifried | so I used security@ hoping it would work, it didn't bounce so I assumed it's valid, but then no reply for a few days | 20:40 |
| J1m | OK< I'll see what I can find out. It won't be quick. | 20:40 |
| kseifried | I wonder how many security reports you guys have sitting in that mailbox | 20:41 |
| kseifried | anyways I eamiled security-response@, hopefully that is correct | 20:41 |
| kseifried | if not I'll just post this publicly next week | 20:41 |
| MatthewWilkes | kseifried: Have you emailed security-response@ yet? I haven't seen anything come through | 20:41 |
| MatthewWilkes | ah | 20:41 |
| kseifried | I just did | 20:41 |
| J1m | MatthewWilkes, honestly, I'm not invoved in Zope development anymore, but I believe we're mograting to github trackers. | 20:41 |
| kseifried | so github doesn't allow private bugs/issues so you really need a security contact email that works | 20:42 |
| kseifried | and one that people can find | 20:43 |
| *** maurits1 has quit IRC | 20:43 | |
| MatthewWilkes | Nothing has come through for me yet. | 20:44 |
| kseifried | ah it's broken | 20:45 |
| kseifried | Your mail to 'Security-response' with the subject | 20:45 |
| *** Jan_Garaj3 has quit IRC | 20:45 | |
| kseifried | Is being held until the list moderator can review it for approval. | 20:45 |
| kseifried | The reason it is being held: | 20:45 |
| kseifried | Post by non-member to a members-only list | 20:45 |
| MatthewWilkes | oh, job | 20:45 |
| MatthewWilkes | joy* | 20:45 |
| MatthewWilkes | I wonder who's a moderator to that | 20:45 |
| kseifried | you guys rprolly have a lot of lost security reports =( | 20:45 |
| MatthewWilkes | I don't know if anyone really uses Zope2 without Plone, but there's a decent chance | 20:46 |
| MatthewWilkes | kseifried: I'll send an email to the list to prod whoever's a moderator, but could you possibly email the Plone security team at security@plone.org or me personally ( matthew@matthewwilkes.co.uk - https://launchpad.net/~zope-security/+members ) - then I can at least forward it to the list and we can get this particular one looked at | 20:48 |
| kseifried | huh | 20:48 |
| MatthewWilkes | I know those are crappy solutions | 20:48 |
| kseifried | MatthewWilkes honestly if it's well documented/advertised I don't care whom I have to email | 20:48 |
| kseifried | emailing security@plone | 20:48 |
| MatthewWilkes | kseifried: Thanks, and sorry about this. Zope isn't really under active development anymore, but this shouldn't have slipped | 20:49 |
| kseifried | meh, it happens | 20:50 |
| kseifried | in fairness I just cleaned out a lot of old junk from redhat and it was glorious =) | 20:50 |
| kseifried | sent | 20:51 |
| J1m | I just moderated that message and set kseifried's messages to be unmoderated in the future. | 20:52 |
| MatthewWilkes | kseifried: Received | 20:52 |
| J1m | I moderate most lists :/, and generally get notified when I have something to do. | 20:53 |
| J1m | nfc what happens to security@zope.org. | 20:53 |
| *** m8 has joined #zope | 21:03 | |
| *** Jan_Garaj3 has joined #zope | 21:06 | |
| *** menesis has quit IRC | 21:23 | |
| *** Jan_Garaj3 has quit IRC | 21:30 | |
| *** Jan_Garaj3 has joined #zope | 21:35 | |
| *** __mac__ has joined #zope | 21:59 | |
| *** __mac__ has quit IRC | 22:07 | |
| kseifried | J1m hopefully I don't have to report more ;) | 22:11 |
| *** __mac__ has joined #zope | 22:12 | |
| kseifried | J1m is it on a unix box? default that may be forwarding to root | 22:12 |
| kseifried | in /etc/aliases | 22:12 |
| kseifried | yeah it's a debian box running postfix | 22:13 |
| kseifried | so whomever you forward root@'s email to gets security@ stuff by default | 22:13 |
| kseifried | J1m so this issue is fixed, so I'll just report it to oss-security@ and ask Mitre for a public cve then ok? | 22:14 |
| kseifried | the xss thing that is | 22:14 |
| *** __mac__ has quit IRC | 22:17 | |
| *** __mac__ has joined #zope | 22:17 | |
| *** MrTango has joined #zope | 22:28 | |
| *** menesis has joined #zope | 22:45 | |
| *** fdrake has joined #zope | 22:51 | |
| *** MrTango has quit IRC | 23:59 | |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!