Niall, if you send them to our individual Apache accounts per the
instructions, we will let you know the moment we retrieve them so you can
delete it.

You can send them whenever you read this or we can plan to do this Monday
first thing (since we're in different time zones, I believe).


On Fri, Jul 11, 2025 at 1:43 AM Niall Pemberton <niall.pember...@gmail.com>
wrote:

> We need to make progress on this as it’s blocking getting Infra to
> shutdown resources (which would remove private@jclouds).
>
> Sebb, the links will only be valid for a short time & since it’s only a
> social media account isn’t the risk minimal?
>
> Niall
>
> On Mon, 7 Jul 2025 at 15:54, Brian Proffitt <br...@proffitt.org> wrote:
>
>> I can see that. Any recommendations you might have to get them into BW
>> safely are welcome.
>>
>> BKP
>>
>> On Sun, Jul 6, 2025 at 5:02 PM sebb <seb...@gmail.com> wrote:
>> >
>> > On Sun, 6 Jul 2025 at 17:49, Brian Proffitt <b...@apache.org> wrote:
>> > >
>> > > M&P is set up with an ASF BitWarden account, Chris L has set it up for
>> > > us.  Please send the credentials to us and we will store them in
>> > > Bitwarden, as per the M&P social media attic process.
>> >
>> > My concern is not about Bitwarden; I am sure that is secure once the
>> > credentials are stored there.
>> >
>> > However I think that the proposed method for transferring the
>> > credentials is not very secure.
>> >
>> > > BKP
>> > >
>> > >
>> > > Brian Proffitt
>> > > VP, Marketing & Publicity
>> > > VP, Conferences
>> > >
>> > > On Fri, Jul 4, 2025 at 7:47 AM sebb <seb...@gmail.com> wrote:
>> > > >
>> > > > On Thu, 3 Jul 2025 at 19:07, Niall Pemberton <
>> niall.pember...@gmail.com> wrote:
>> > > > >
>> > > > > @Sebb, as you have access to the credentials, can you share them?
>> > > > >
>> > > > > It costs to have a Bitwarden account, so maybe NordPass is a
>> better option
>> > > > > for password sharing.
>> > > >
>> > > > It's possible to set up a free personal Bitwarden account:
>> > > >
>> > > > https://bitwarden.com/pricing/
>> > > >
>> > > > I have one that I set up as a test a while ago.
>> > > >
>> > > > I have experimented with Send, and basically it creates a link that
>> > > > allow one to access the content of the send in a browser.
>> > > > There does not seem to be any protection against access by 3rd
>> > > > parties; anyone who has access to the URL can see the content.
>> > > > AFAICT the only advantage over a plain email is that the content
>> > > > automatically disappears after a short while (default 1 week),
>> whereas
>> > > > emails would have to be manually deleted. by both sender an
>> recipient.
>> > > >
>> > > > I'm not convinced it's an appropriate way to share sensitive data,
>> > > > unless one shares the link via a secure channel (in which case is
>> > > > there a need for the Send protection in the first place?).
>> > > >
>> > > > Or maybe I am missing something, and there is a way for Bitwarden to
>> > > > send data directly between its users?
>> > > >
>> > > > GMail offers a more sophisticated confidential email: the content is
>> > > > again shared via a link, but the link can only be opened by the
>> person
>> > > > with access to the email address.
>> > > > If the recipient does not use GMail, they will be sent a one-time
>> code
>> > > > before they can see the message.
>> > > >
>> > > > This seems at least as good as the Bitwarden method, and many more
>> > > > people have GMail accounts.
>> > > >
>> > > > Sebb
>> > > >
>> > > >
>> > > > > Niall
>> > > > >
>> > > > > On Thu, 3 Jul 2025 at 17:45, Melissa Logan <meli...@constantia.io>
>> wrote:
>> > > > >
>> > > > > > Hi Niall, we needed to fine-tune the workflow before
>> responding. Here are
>> > > > > > instructions:
>> > > > > >
>> > > > > >
>> > > > > >    1.
>> > > > > >
>> > > > > >    Share account passwords via Bitwarden’s “Send” feature and
>> share the
>> > > > > >    link to: melissalo...@apache.org, b...@apache.org,
>> wt...@apache.org
>> > > > > >    1.
>> > > > > >
>> > > > > >       Note: If you do not have a Bitwarden account set up, you
>> will need
>> > > > > >       to create one in order to send – or use another secure
>> password manager to
>> > > > > >       send us the link.
>> > > > > >       2.
>> > > > > >
>> > > > > >    M&P will create a free email account for your project, e.g.
>> > > > > >    projectn...@gmail.com. > Note, this has been completed for
>> jclouds.
>> > > > > >    3.
>> > > > > >
>> > > > > >    M&P will log in to each social media account and change the
>> email to
>> > > > > >    the new free email account.
>> > > > > >    4.
>> > > > > >
>> > > > > >    M&P will verify the account with the new email, change, the
>> password,
>> > > > > >    and save details in Bitwarden.
>> > > > > >
>> > > > > >
>> > > > > > Any questions, just let us know.
>> > > > > >
>> > > > > > On Mon, Jun 30, 2025 at 4:33 AM Brian Proffitt <
>> br...@proffitt.org> wrote:
>> > > > > >
>> > > > > >> We saw it, and have started the process to create a new
>> placeholder
>> > > > > >> account so we can transfer "ownership" of the X account to
>> that.
>> > > > > >> Someone from M&P will be reaching out to you/them to get the
>> keys to
>> > > > > >> the X account to make the transfer.
>> > > > > >>
>> > > > > >> BKP
>> > > > > >>
>> > > > > >> On Mon, Jun 30, 2025 at 5:57 AM Niall Pemberton
>> > > > > >> <niall.pember...@gmail.com> wrote:
>> > > > > >> >
>> > > > > >> > Hi M&P,
>> > > > > >> >
>> > > > > >> > Adding mark...@apache.org as theres been no response from
>> > > > > >> pr...@apache.org
>> > > > > >> >
>> > > > > >> > Niall
>> > > > > >> >
>> > > > > >> > On Thu, 26 Jun 2025 at 17:30, Niall Pemberton <
>> > > > > >> niall.pember...@gmail.com> wrote:
>> > > > > >> >>
>> > > > > >> >> Hi M&P,
>> > > > > >> >>
>> > > > > >> >> The jclouds project is in the process of moving to the
>> Attic (see
>> > > > > >> ATTIC-244[1] ) and at they have an x.com account (
>> https://x.com/jclouds)
>> > > > > >> which has been updated as per the new Attic process for social
>> media[2].
>> > > > > >> >>
>> > > > > >> >> The next step in that process is to discuss with you "the
>> best way to
>> > > > > >> share social media credentials for safekeeping". So how would
>> you like to
>> > > > > >> proceed with this?
>> > > > > >> >>
>> > > > > >> >> One other thing to consider, that account is linked to
>> > > > > >> priv...@jclouds.apache.org which at some point will be closed
>> down as
>> > > > > >> part of the Attic process. So it would be a good idea, once
>> you have the
>> > > > > >> credentials, to change that to something M&P control.
>> > > > > >> >>
>> > > > > >> >> Regards
>> > > > > >> >>
>> > > > > >> >> Niall
>> > > > > >> >>
>> > > > > >> >> [1] https://issues.apache.org/jira/browse/ATTIC-244
>> > > > > >> >> [2]
>> > > > > >>
>> https://attic.apache.org/process-howto.html#5-update-social-media-if-any
>> > > > > >>
>> > > > > >>
>> ---------------------------------------------------------------------
>> > > > > >> To unsubscribe, e-mail: markpub-unsubscr...@apache.org
>> > > > > >> For additional commands, e-mail: markpub-h...@apache.org
>> > > > > >>
>> > > > > >>
>> > > >
>> > > >
>> ---------------------------------------------------------------------
>> > > > To unsubscribe, e-mail: markpub-unsubscr...@apache.org
>> > > > For additional commands, e-mail: markpub-h...@apache.org
>> > > >
>> > >
>> > > ---------------------------------------------------------------------
>> > > To unsubscribe, e-mail: markpub-unsubscr...@apache.org
>> > > For additional commands, e-mail: markpub-h...@apache.org
>> > >
>> >
>> > ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: markpub-unsubscr...@apache.org
>> > For additional commands, e-mail: markpub-h...@apache.org
>> >
>>
>

Reply via email to