On Thu, Nov 13, 2008 at 1:55 PM, Thomas Pfaff <[EMAIL PROTECTED]> wrote: > On Thu, 13 Nov 2008 12:55:36 -0500 > "Ted Unangst" <[EMAIL PROTECTED]> wrote: > >> [...] There's no announcements on the list because probably >> half the developers don't know they are supposed to make such >> announcements. > > Excuse my ignorance, but who keeps http://openbsd.org/errata44.html > updated, then? Apparently the errata page is kept up-to-date, so > why not automate the process of sending mail to security-announce?
Because it hasn't happened in 10 years of whining about it. There are two ways to fix the problem. One is the developers change their process. As should be damn clear by now, you're not making much progress in that regard. The other option is to step up and remind the developers when they are not doing what they should. That doesn't mean throwing a pity party on misc every 6 months, it means actively watching what's happening as errata come out. This is the one thing that *ANYONE* who cares can do, yet nobody does it. All we get is more chatter about changing things that obviously aren't changing. Of course, this is how things always work on misc. There's the developers do it option and the community does it option. The community is full of ideas about the first option, and full of shit when it comes to the second. It doesn't matter which way is better, it only matters which way something will get done.
