Re: [Python-Dev] Python security team

2008-10-01 Thread Barry Warsaw
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sep 30, 2008, at 7:27 AM, Jan Mate(jek [EMAIL PROTECTED] Jan Mate wrote: Thanks for your answer. I guess the process is the real problem then. - From what i could observe, the connection between vendor-sec and PSRT is not really working as

Re: [Python-Dev] Python security team

2008-09-30 Thread Steve Holden
Jan Mate wrote: Guido van Rossum napsal(a): [...] know you personally -- but perhaps other current members of the PSRT do and that could be enough to secure an invitation. No, i don't think that i'm known well enough to earn the invitation (yet), this was more of a so how the hell does it

Re: [Python-Dev] Python security team

2008-09-29 Thread Jan Matejek
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Brett Cannon napsal(a): On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: First, I would like to access to these informations. Not only this issue, but all security related issues. I have some knowledges about security and I

Re: [Python-Dev] Python security team

2008-09-29 Thread David Stanek
On Sat, Sep 27, 2008 at 8:45 PM, Brett Cannon [EMAIL PROTECTED] wrote: On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: I would like to know if a Python security team does exist. I sent an email about an imageop issue, and I didn't get any answer. Later I learned that

Re: [Python-Dev] Python security team

2008-09-29 Thread Guido van Rossum
On Mon, Sep 29, 2008 at 5:11 AM, Jan Matejek [EMAIL PROTECTED] wrote: Brett Cannon napsal(a): On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: First, I would like to access to these informations. Not only this issue, but all security related issues. I have some

Re: [Python-Dev] Python security team

2008-09-29 Thread Giampaolo Rodola'
Yeah, right. Let's continue there. --- Giampaolo http://code.google.com/p/pyftpdlib On 29 Set, 22:44, Josiah Carlson [EMAIL PROTECTED] wrote: On Mon, Sep 29, 2008 at 12:02 PM, Giampaolo Rodola' [EMAIL PROTECTED] wrote: On 27 Set, 20:04, Josiah Carlson [EMAIL PROTECTED] wrote: On Sat, Sep

Re: [Python-Dev] Python security team

2008-09-28 Thread Steve Holden
Brett Cannon wrote: On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: Hi, I would like to know if a Python security team does exist. I sent an email about an imageop issue, and I didn't get any answer. Later I learned that a security ticket was created, I don't have

Re: [Python-Dev] Python security team

2008-09-28 Thread Victor Stinner
Le Sunday 28 September 2008 02:45:14 Brett Cannon, vous avez écrit : Second, I would like to help to fix all Python security issues. It looks like Python community isn't very reactive (proactive?) about security. Eg. a DoS was reported in smtpd server (integrated to Python)... 15 months

Re: [Python-Dev] Python security team

2008-09-28 Thread Brett Cannon
On Sun, Sep 28, 2008 at 6:39 AM, Steve Holden [EMAIL PROTECTED] wrote: Brett Cannon wrote: On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: Hi, I would like to know if a Python security team does exist. I sent an email about an imageop issue, and I didn't get any

[Python-Dev] Python security team

2008-09-27 Thread Victor Stinner
Hi, I would like to know if a Python security team does exist. I sent an email about an imageop issue, and I didn't get any answer. Later I learned that a security ticket was created, I don't have access to it. First, I would like to access to these informations. Not only this issue, but all

Re: [Python-Dev] Python security team

2008-09-27 Thread Josiah Carlson
On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: Second, I would like to help to fix all Python security issues. It looks like Python community isn't very reactive (proactive?) about security. Eg. a DoS was reported in smtpd server (integrated to Python)... 15 months

Re: [Python-Dev] Python security team

2008-09-27 Thread Brett Cannon
On Sat, Sep 27, 2008 at 8:54 AM, Victor Stinner [EMAIL PROTECTED] wrote: Hi, I would like to know if a Python security team does exist. I sent an email about an imageop issue, and I didn't get any answer. Later I learned that a security ticket was created, I don't have access to it. Yes,