Security-wg: Security WG meeting 2017-11-02

[sam-github]

When

Thursday, Nov 2th, 2017, 19:00 UTC: other timezones

Where

• Call URL, for participants: https://hangouts.google.com/hangouts/_/ytl/DQtsIlP8JPmlwaAg-1DdITdxdVaM-OmUuyNmhYW4M-M=?eid=100598160817214911030
• Youtube stream, for viewers: ttp://youtu.be/UWKC1GTPAFo
• Minutes document: https://docs.google.com/document/d/1YoL4ISHc_c3klSUg5y428i7vsAibs3JsPTG8NeUn_7I/edit?usp=sharing

Agenda

• review last WG
• 3rd party vulnerability management on HackerOne
• proposing early disclosure program
• cve management program
• bug bounty program
• acknowledge privacy of info in private repos.
• membership to security teams
• (... add TODO items in comments on the issue, or by direct editing this issue)

[digitalinfinity]

Assuming my math is correct, this meeting is scheduled to start shortly, correct? Is here a URL for the hangout/call?

[mhdawson]

I'll create one

[mhdawson]

For participants: https://hangouts.google.com/hangouts/_/ytl/DQtsIlP8JPmlwaAg-1DdITdxdVaM-OmUuyNmhYW4M-M=?eid=100598160817214911030

For those who just want to watch: http://youtu.be/UWKC1GTPAFo

[joshbw]

I was repeatedly getting "this call is full". Did Hangouts add a cap to the number of participants?

[evilpacket]

@joshbw I thought there was a 10 person cap and it looks like were at that. Not sure what we need to do for larger calls.