Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-12-02 Thread Kevin Cox
On Dec 3, 2016 00:01, "Graham Christensen" wrote: The list was misconfigured. We want the announce list to be announce-only and no other discussion. It is now configured to allow anyone to subscribe / join, but only certain people to send mail. For discussion about issues, I

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-12-02 Thread Graham Christensen
Ok everyone, here is an update: > Maybe the list was initially intended for announcing embargoed issues No, this list is not for embargoed issues. We don't currently have this infrastructure. We are planning on working on this infrastructure in the first / second quarter of 2017. > why is

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-25 Thread Graham Christensen
Peter Simons writes: > why is that list not hosted on the same server as the other nix-related > mailing lists? The service which hosts the other mailing list seems to not be taking new lists. This was a problem when Rob tried to set up the list, and we agreed using a

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-25 Thread Kevin Cox
On 25/11/16 09:23, Moritz Ulrich wrote: Anders Lundstedt writes: How do I subscribe? You seem to need a Google account. But even with one, I don't see the usual subscribe button. I suppose the group is somehow misconfigured to prevent subscriptions. I'm voting to

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-25 Thread Moritz Ulrich
Anders Lundstedt writes: > How do I subscribe? You seem to need a Google account. But even with one, I don't see the usual subscribe button. I suppose the group is somehow misconfigured to prevent subscriptions. I'm voting to move this to a non-google-controlled

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-24 Thread Graham Christensen
(I'll be replying to this thread after thanksgiving. Thank you!) On Thu, Nov 24, 2016 at 3:56 PM Peter Simons wrote: > Graham Christensen writes: > > > Firstly, we now have a public mailing list, with a public archive to > > distribute security

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-24 Thread Peter Simons
Graham Christensen writes: > Firstly, we now have a public mailing list, with a public archive to > distribute security announcements. This list can be found here: > > https://groups.google.com/forum/#!forum/nix-security-announce why is that list not hosted on the same

Re: [Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-24 Thread Anders Lundstedt
On Thu, Nov 24, 2016 at 8:13 PM, Graham Christensen wrote: > Please subscribe for future security updates How do I subscribe? ___ nix-dev mailing list nix-dev@lists.science.uu.nl http://lists.science.uu.nl/mailman/listinfo/nix-dev

[Nix-dev] Announcing: Security Tooling, nix-security-announce Mailing List

2016-11-24 Thread Graham Christensen
Hello Nix People, With the help of Rob and Domen, NixOS has taken two big steps in our security infrastructure. This is especially apt after completing the first 10 weekly security roundups. We have now examined over a thousand vulnerability alerts from LWN, and patched almost 200 packages.