Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Raphael Geissert
[No need to send me a copy of the messages] Michael S. Gilbert wrote: > On Wed, 26 Aug 2009 14:06:24 -0500, Raphael Geissert wrote: >> /me now goes back and finally tries to setup a copy of the tracker for >> the PTS integration > > once you've got your local copy of the tracker up and running, c

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Michael S. Gilbert
On Wed, 26 Aug 2009 14:06:24 -0500, Raphael Geissert wrote: > /me now goes back and finally tries to setup a copy of the tracker for the > PTS integration once you've got your local copy of the tracker up and running, can you post a howto to the list or insert documentation into the introduction?

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Michael S. Gilbert
On Wed, 26 Aug 2009 21:04:08 +0200, Moritz Muehlenhoff wrote: > On Wed, Aug 26, 2009 at 02:55:03PM -0400, Michael S. Gilbert wrote: > > On Wed, 26 Aug 2009 20:24:36 +0200, Moritz Muehlenhoff wrote: > > > On Wed, Aug 26, 2009 at 02:25:19PM -0400, Michael S. Gilbert wrote: > > > > On Wed, 26 Aug 2009

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Michael S. Gilbert
On Wed, 26 Aug 2009 14:06:24 -0500, Raphael Geissert wrote: > Michael S. Gilbert wrote: > [...] > > > > btw, my script is already smart enough to exclude fixed embeds; it uses > > the /// tags in embedded-code-copies to > > determine if an issue is open or not. so as long as the data in > > embed

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Raphael Geissert
Michael S. Gilbert wrote: [...] > > btw, my script is already smart enough to exclude fixed embeds; it uses > the /// tags in embedded-code-copies to > determine if an issue is open or not. so as long as the data in > embedded-code-copies is accurate, then my script already only generates > TODOs

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Moritz Muehlenhoff
On Wed, Aug 26, 2009 at 02:55:03PM -0400, Michael S. Gilbert wrote: > On Wed, 26 Aug 2009 20:24:36 +0200, Moritz Muehlenhoff wrote: > > On Wed, Aug 26, 2009 at 02:25:19PM -0400, Michael S. Gilbert wrote: > > > On Wed, 26 Aug 2009 20:01:42 +0200, Moritz Muehlenhoff wrote: > > > > On Wed, Aug 26, 200

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Michael S. Gilbert
On Wed, 26 Aug 2009 20:24:36 +0200, Moritz Muehlenhoff wrote: > On Wed, Aug 26, 2009 at 02:25:19PM -0400, Michael S. Gilbert wrote: > > On Wed, 26 Aug 2009 20:01:42 +0200, Moritz Muehlenhoff wrote: > > > On Wed, Aug 26, 2009 at 01:59:58PM -0400, Michael S. Gilbert wrote: > > > > On Wed, 26 Aug 2009

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Moritz Muehlenhoff
On Wed, Aug 26, 2009 at 02:25:19PM -0400, Michael S. Gilbert wrote: > On Wed, 26 Aug 2009 20:01:42 +0200, Moritz Muehlenhoff wrote: > > On Wed, Aug 26, 2009 at 01:59:58PM -0400, Michael S. Gilbert wrote: > > > On Wed, 26 Aug 2009 19:29:10 +0200, Moritz Muehlenhoff wrote: > > > > You should redirect

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Michael S. Gilbert
On Wed, 26 Aug 2009 20:01:42 +0200, Moritz Muehlenhoff wrote: > On Wed, Aug 26, 2009 at 01:59:58PM -0400, Michael S. Gilbert wrote: > > On Wed, 26 Aug 2009 19:29:10 +0200, Moritz Muehlenhoff wrote: > > > You should redirect the TODOs in a file separate from CVE/list, > > > > thanks for looking at

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Moritz Muehlenhoff
On Wed, Aug 26, 2009 at 01:59:58PM -0400, Michael S. Gilbert wrote: > On Wed, 26 Aug 2009 19:29:10 +0200, Moritz Muehlenhoff wrote: > > You should redirect the TODOs in a file separate from CVE/list, > > thanks for looking at this. i personally think that the cve list is > the best destination.

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Michael S. Gilbert
On Wed, 26 Aug 2009 19:29:10 +0200, Moritz Muehlenhoff wrote: > You should redirect the TODOs in a file separate from CVE/list, thanks for looking at this. i personally think that the cve list is the best destination. the reasoning is that cve TODOs are good indicators of what needs worked on a

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Moritz Muehlenhoff
On Sun, Aug 23, 2009 at 09:11:51PM -0400, Michael S Gilbert wrote: > On Mon, 24 Aug 2009 00:59:44 + Michael Gilbert Michael wrote: > > introduction of inject-embedded-code-copies > > hello, i've noticed that embedded code copies can be troublesome to > track, so i've developed a script that au

Re: [Secure-testing-team] inject-embedded-code-copies

2009-08-26 Thread Raphael Geissert
Hi, Michael S Gilbert wrote: > > hello, i've noticed that embedded code copies can be troublesome to > track, so i've developed a script that automatically adds TODOs for > known code copies to the CVE list. Nice, thanks. Some time ago I wrote bin/embedded-cleanup which performs some syntax che