From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id C25DCBC6 for ; Sat, 11 Jul 2015 16:38:47 +0000 (UTC) Received: from imap.thunk.org (imap.thunk.org [74.207.234.97]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id 4F4FBB0 for ; Sat, 11 Jul 2015 16:38:47 +0000 (UTC) Date: Sat, 11 Jul 2015 12:38:38 -0400 From: Theodore Ts'o To: Jason Cooper Message-ID: <20150711163838.GA4441@thunk.org> References: <20150710143832.GU23515@io.lakedaemon.net> <20150710162328.GB12009@thunk.org> <1436599873.2243.10.camel@HansenPartnership.com> <20150711160202.GC23515@io.lakedaemon.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20150711160202.GC23515@io.lakedaemon.net> Cc: James Bottomley , Josh Boyer , ksummit-discuss@lists.linuxfoundation.org Subject: Re: [Ksummit-discuss] [CORE TOPIC] dev/maintainer workflow security List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Sat, Jul 11, 2015 at 04:02:02PM +0000, Jason Cooper wrote: > > Could we have some sort of post-vuln/CVE conversation dissecting the > vulnerability and how it got there? Or, perhaps select a few for > process-dissection to be presented at the summit? Kees did a really good presentation entitled "security anti-patterns" a year or two ago at a kernel summit (the one at Edinburgh if I remember correctly?). Kees, do you think it would be worth updating and re-doing that presentation? And perhaps at a wider set of venues beyond just the kernel summit.... - Ted