Re: Security team response

2008-10-07 Thread Jacob Kaplan-Moss
On Tue, Oct 7, 2008 at 2:11 PM, Bob <[EMAIL PROTECTED]> wrote: > Of course, this just highlights why it's important to have a policy > for acknowledging receipt of a security vuln. If I knew I should > expect a reply regardless, I probably would have re-sent this a week > ago. Yup; I'll add somet

Re: Security team response

2008-10-07 Thread Bob
Ok, re-sent :) Of course, this just highlights why it's important to have a policy for acknowledging receipt of a security vuln. If I knew I should expect a reply regardless, I probably would have re-sent this a week ago. -bob On Oct 7, 2:30 pm, "Jacob Kaplan-Moss" <[EMAIL PROTECTED]> wrote: >

Re: Security team response

2008-10-07 Thread Jacob Kaplan-Moss
Hey Bob -- On Tue, Oct 7, 2008 at 11:51 AM, Bob <[EMAIL PROTECTED]> wrote: > I submitted a possible low-risk security issue about 2 weeks ago to > [EMAIL PROTECTED] and have not received a response. Damn, I'm sorry about that! I don't see your email in the security inbox anywhere, so it's possib

Security team response

2008-10-07 Thread Bob
I submitted a possible low-risk security issue about 2 weeks ago to [EMAIL PROTECTED] and have not received a response. I'm assuming this means that it is not being acknowledged as a vulnerability, but I'm not sure how long I'm expected to wait before posting it as a regular bug on Trac. The docu