Re: [QGIS-Developer] Reporting security related issues ?

2020-02-14 Thread Martin Dobias
Hi I would also like to join the group... Thanks Martin On Fri, Feb 14, 2020, 00:29 Nyall Dawson wrote: > /me Raises hand also > > Nyall > ___ > QGIS-Developer mailing list > QGIS-Developer@lists.osgeo.org > List info:

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Nyall Dawson
/me Raises hand also Nyall ___ QGIS-Developer mailing list QGIS-Developer@lists.osgeo.org List info: https://lists.osgeo.org/mailman/listinfo/qgis-developer Unsubscribe: https://lists.osgeo.org/mailman/listinfo/qgis-developer

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Larry Shaffer
Hi Richard, All, I would like to be added as well. Regards, Larry Shaffer Dakota Cartography Black Hills, South Dakota On Thu, Feb 13, 2020 at 5:23 AM Richard Duivenvoorde wrote: > On 13/02/2020 13.08, security minded wrote: > > Hello, > > > > I've tried to email secur...@qgis.org

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Richard Duivenvoorde
On 13/02/2020 13.08, security minded wrote: > Hello, > > I've tried to email secur...@qgis.org but got > an error message: "We're writing to let you know that the group you > tried to contact (security) may not exist, or you may not have > permission to post messages to

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread security minded
Hello, I've tried to email secur...@qgis.org but got an error message: "We're writing to let you know that the group you tried to contact (security) may not exist, or you may not have permission to post messages to the group" Le mer. 12 févr. 2020 à 17:10, Richard Duivenvoorde a écrit : > On

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Paul Blottiere
Hi Richard, I'd like to be added to the list too please :). Thanks! Le jeu. 13 févr. 2020 à 09:48, Matthias Kuhn a écrit : > On 2/13/20 9:45 AM, Richard Duivenvoorde wrote: > > On 13/02/2020 09.38, Matthias Kuhn wrote: > > > >> Maybe others are better than me in remembering such workflows,

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Matthias Kuhn
On 2/13/20 9:45 AM, Richard Duivenvoorde wrote: On 13/02/2020 09.38, Matthias Kuhn wrote: Maybe others are better than me in remembering such workflows, but I will forget that for sure. Which 'workflow'? - somebody finds an issue, and sents an email to secur...@qgis.org - everybody in the

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Richard Duivenvoorde
On 13/02/2020 09.38, Matthias Kuhn wrote: > Maybe others are better than me in remembering such workflows, but I > will forget that for sure. Which 'workflow'? - somebody finds an issue, and sents an email to secur...@qgis.org - everybody in the mail group sees this and can respond (cc to

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-13 Thread Matthias Kuhn
On 2/12/20 5:09 PM, Richard Duivenvoorde wrote: On 12/02/2020 17.01, Matthias Kuhn wrote: Thanks Richard, I'm interested as well in being added. Will all people in the group be added as CC? It would be good if someone asks a question back everyone else gets a notification as well (to avoid

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Luigi Pirelli
Hi Richard, please may you add me too? tnx Luigi Pirelli ** * LinkedIn: https://www.linkedin.com/in/luigipirelli * Stackexchange: http://gis.stackexchange.com/users/19667/luigi-pirelli * GitHub:

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Richard Duivenvoorde
On 12/02/2020 17.01, Matthias Kuhn wrote: > Thanks Richard, > > I'm interested as well in being added. > > Will all people in the group be added as CC? It would be good if someone > asks a question back everyone else gets a notification as well (to avoid > asking the same question many times -

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Matthias Kuhn
Thanks Richard, I'm interested as well in being added. Will all people in the group be added as CC? It would be good if someone asks a question back everyone else gets a notification as well (to avoid asking the same question many times - or nobody reacting at all because everyone assumes

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread David Marteau
Hi Richard, I would like to be added to the list, please . Thank you David. Le 12/02/2020 à 13:19, Richard Duivenvoorde a écrit : FYI: I've just created an email(group) address for this: secur...@qgis.org Emails to that address will be forwarded to PSC members and members of admin-group.

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Régis Haubourg
Me too! Le mer. 12 févr. 2020 à 14:34, Alessandro Pasotti a écrit : > > > On Wed, Feb 12, 2020 at 1:19 PM Richard Duivenvoorde > wrote: > >> FYI: I've just created an email(group) address for this: >> >> secur...@qgis.org >> >> Emails to that address will be forwarded to PSC members and

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Nathan Woodrow
Could I get added to that one please Richard. Thanks. Nathan. On Wed., 12 Feb. 2020, 10:19 pm Richard Duivenvoorde, wrote: > FYI: I've just created an email(group) address for this: > > secur...@qgis.org > > Emails to that address will be forwarded to PSC members and members of > admin-group.

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Richard Duivenvoorde
FYI: I've just created an email(group) address for this: secur...@qgis.org Emails to that address will be forwarded to PSC members and members of admin-group. If individuals/core-members want to be added, please let me know so I can add you to that group. Regards, Richard Duivenvoorde On

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread jratike80
Hi, In the Geoserver project we have a dedicated, closed, moderated and not archived mailing list for reporting vulnerabilities https://lists.osgeo.org/mailman/listinfo/geoserver-security. We advice users to use just that mailing list in user documentation http://geoserver.org/comm/ and in the

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Sandro Santilli
On Wed, Feb 12, 2020 at 09:00:33AM +0100, Paolo Cavallini wrote: > Hi, > generally here. If you think it is a grave vulnerability you can send it > privately to any PSC member or major QGIS developer (you can check on > GitHub for recent activity). Sounds like a treasure hunt. How about writing a

Re: [QGIS-Developer] Reporting security related issues ?

2020-02-12 Thread Paolo Cavallini
Hi, generally here. If you think it is a grave vulnerability you can send it privately to any PSC member or major QGIS developer (you can check on GitHub for recent activity). Thanks! Il 11/02/20 19:56, security minded ha scritto: > Hello, > > What is the best way to report security issues