To echo Tim's remarks, this is really two issues: 1) A failure of controls (the current incident report) 2) A failure to revoke
I'm rather concerned about #2 and the lack of detail presently provided regarding it, as well as the one week wait to filing the incident report for #1. _______________________________________________ dev-security-policy mailing list [email protected] https://lists.mozilla.org/listinfo/dev-security-policy

