Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Great! Thank you. I started an email thread to schedule the meeting. Feel free to add any other maintainers interested. Lmk if there are any questions in the meantime. Thank you, Amir On Thu, Nov 17, 2022 at 10:57 AM Luca Boccassi wrote: > Sounds good for me, thank you > > On Thu, 17 Nov 2022

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Sounds good for me, thank you On Thu, 17 Nov 2022 at 16:36, Amir Montazery wrote: > Thank you! How does 3pm UTC on 6th December look? > > Thanks again, > Amir > > On Wed, Nov 16, 2022 at 1:23 PM Arnaud Loonstra > wrote: > >> Before 4pm UTC suits me as well, both days. I prefer the 6th. >> >>

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Thank you! How does 3pm UTC on 6th December look? Thanks again, Amir On Wed, Nov 16, 2022 at 1:23 PM Arnaud Loonstra wrote: > Before 4pm UTC suits me as well, both days. I prefer the 6th. > > Rg, > > Arnaud > > On 16-11-2022 20:12, Luca Boccassi wrote: > > For myself, before 4pm or after

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Before 4pm UTC suits me as well, both days. I prefer the 6th. Rg, Arnaud On 16-11-2022 20:12, Luca Boccassi wrote: For myself, before 4pm or after 7.30pm (UTC) both days On Wed, 16 Nov 2022 at 18:47, Amir Montazery > wrote: Thank you! Many of us are in european

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

For myself, before 4pm or after 7.30pm (UTC) both days On Wed, 16 Nov 2022 at 18:47, Amir Montazery wrote: > Thank you! Many of us are in european timezones as well (I myself am based > in Chicago, USA). Is there a time that works best on Monday, December 5th > or Tuesday, December 6th? > > On

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Thank you! Many of us are in european timezones as well (I myself am based in Chicago, USA). Is there a time that works best on Monday, December 5th or Tuesday, December 6th? On Tue, Nov 15, 2022 at 5:58 PM Luca Boccassi wrote: > Sounds great, thank you - most of us are in the european

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Sounds great, thank you - most of us are in the european timezones, let us know when you have a date/time in mind On Tue, 15 Nov 2022 at 18:02, Amir Montazery wrote: > Thank you to everyone who has helped so far! What we can concretely offer > is below under "What you can expect". We totally

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Thank you for the response Trevor. For the sake of this pilot, we're focusing mainly on libzmq. We have some folks who are very well-versed in C++ ready to go. On Tue, Nov 15, 2022 at 1:31 PM Trevor Bernard wrote: > Is this strictly for libzmq or can child projects like jeromq get some > help

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Is this strictly for libzmq or can child projects like jeromq get some help as well? On Tue, Nov 15, 2022 at 1:07 PM Amir Montazery wrote: > Thank you to everyone who has helped so far! What we can concretely offer > is below under "What you can expect". We totally understand you maintainers >

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Thank you to everyone who has helped so far! What we can concretely offer is below under "What you can expect". We totally understand you maintainers are busy so the process is designed to be easy for those who participate. We also have a budget to compensate maintainers who help out directly

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Awesome! Thank you for that Luca. Apologies for the lag, I was in Detroit last week for KubeCon meeting a number of projects we've done security engagements with and collecting feedback. I hope we can sync soon and discuss opportunities to help out with zeromq! Our org OSTIF (https://ostif.org/)

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Thanks, existing fuzzers are the *_fuzzer.cpp files at: https://github.com/zeromq/libzmq/tree/master/tests On Wed, 19 Oct 2022 at 16:04, Amir Montazery wrote: > Of course, that is understandable. Thank you all for maintaining such an > important project despite your busy schedules! I hope we

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Of course, that is understandable. Thank you all for maintaining such an important project despite your busy schedules! I hope we can find a way to help make your lives easier. What we can contribute is a security review by an experienced team to assess general design review; code quality,

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Hi, Thanks for the offer, but let's continue via mail please, we are all very busy as-is. What can you contribute, concretely? I have already set up fuzzing some time ago. Can you provide new fuzzers/test cases? If so that would be great, just send pull requests to the repository. On Wed, 12

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

We can help with whatever the project needs. The intention is to connect the project maintainer(s)/contributor(s) with our security team (made up of security experts and Google Open Source Security engineers) to help where the project needs it most. We can help with bug fixes, security tooling i.e

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Hi, What kind of support are you able to provide? On Tue, 11 Oct 2022 at 14:30, Amir Montazery wrote: > Yes, I meant zeromq. Thank you Arnaud! That is my mistake. > > That’s great news, we have teams ready to help. Would you be a good person > to coordinate that with? If anyone else comes to

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Yes, I meant zeromq. Thank you Arnaud! That is my mistake. That’s great news, we have teams ready to help. Would you be a good person to coordinate that with? If anyone else comes to mind to include please let me know! I would be happy to set up a quick call to meet and discuss how we can best

Re: [zeromq-dev] Free security help from Google and Open Source Technology Improvement Fund, Inc

Are you sure you are on the right list? This the zeromq list not dnsmasq. We'd appreciate any help for sure! Rg, Arnaud On 07-10-2022 21:46, Amir Montazery wrote: Hello dnsmasq community! OSTIF would like to help improve your security posture! I’m Amir from Open Source Technology