In the original post, I took private to mean its own dedicated list... not that it'd be hidden from view from everyone. IMHO everything with Fedora should be in the open. Bugs should be reported upstream, so I dont see why there would need to be any confidential information dealt with by the SIG.
Security exploits for upstream applications shouldnt be dealt with upstream and not here with a Fedora SIG. There's no reason for exploit discussion of that nature unless its something Fedora has introduced, at which point it's relevant and should be public so users can be aware and address/mitigate any potential threat. JT On Mon, Jun 19, 2023 at 5:49 PM Philip Wyett <philip.wy...@kathenas.org> wrote: > On Mon, 2023-06-19 at 23:39 +0200, Emmanuel Seyman wrote: > > * Philip Wyett [19/06/2023 22:20] : > > > Private mailing list? No part of this project should have private > anything IMHO. > > > > Bug reports can explain security flaws and lead to exploits. They can > > also contain confidentiel information. > > > > I would suggest a private ml dedicated to bugs and a public one for > > everything else, IMHO. > > > > Emmanuel > > > > Hi, > > Any bug report that contains sensitive data (exploitable or not) and is > deemed private, the > discussion should be done in that bug report. > > Private ML is always a bad idea as much discussion tends to end up on it > and the wider community is > excluded and I do not believe we are here to exclude. > > Regards > > Phil > > -- > *** Playing the game for the games own sake. *** > > > Associations: > > * Debian Maintainer (DM) > * Fedora/EPEL Maintainer. > * Contributor member of the AlmaLinux foundation. > > WWW: https://kathenas.org > > Buy Me a Coffee: https://www.buymeacoffee.com/kathenasorg > > Twitter: @kathenasorg > > Instagram: @kathenasorg > > IRC: kathenas > > GPG: 724AA9B52F024C8B > _______________________________________________ > devel mailing list -- devel@lists.fedoraproject.org > To unsubscribe send an email to devel-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org > Do not reply to spam, report it: > https://pagure.io/fedora-infrastructure/new_issue >
_______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
