Security-wg: Node.js Foundation Security WorkGroup Meeting 2018-12-31

[mhdawson]

Time

UTC Mon 31-Dec-2018 16:00 (04:00 PM):

| Timezone | Date/Time |
|---------------|-----------------------|
| US / Pacific | Mon 31-Dec-2018 08:00 (08:00 AM) |
| US / Mountain | Mon 31-Dec-2018 09:00 (09:00 AM) |
| US / Central | Mon 31-Dec-2018 10:00 (10:00 AM) |
| US / Eastern | Mon 31-Dec-2018 11:00 (11:00 AM) |
| London | Mon 31-Dec-2018 16:00 (04:00 PM) |
| Amsterdam | Mon 31-Dec-2018 17:00 (05:00 PM) |
| Moscow | Mon 31-Dec-2018 19:00 (07:00 PM) |
| Chennai | Mon 31-Dec-2018 21:30 (09:30 PM) |
| Hangzhou | Tue 01-Jan-2019 00:00 (12:00 AM) |
| Tokyo | Tue 01-Jan-2019 01:00 (01:00 AM) |
| Sydney | Tue 01-Jan-2019 03:00 (03:00 AM) |

Or in your local time:

• http://www.timeanddate.com/worldclock/fixedtime.html?msg=Node.js+Foundation+Security%20WorkGroup+Meeting+2018-12-31&iso=20181231T16
• or http://www.wolframalpha.com/input/?i=04PM+UTC%2C+Dec+31%2C+2018+in+local+time

Links

• Minutes Google Doc: https://docs.google.com/document/d/1quYH1RzH6F_kyPkw2TqD7spoi1Kl0CMTh1ujndOq7gA/edit

Agenda

Extracted from security-wg-agenda labelled issues and pull requests from the nodejs org prior to the meeting.

nodejs/security-wg

• Nominate Matt Austin to join the Security WG and Triage team #434
• Vulnerabilities from academics #415
• [ANN]: refactor report id field to be auto-generating, Deadline: 10.11.2018 #402
• Migrate vulnerability database to it own repo #359

Invited

• Security wg team: @nodejs/security-wg

Observers/Guests

Notes

The agenda comes from issues labelled with security-wg-agenda across all of the repositories in the nodejs org. Please label any additional issues that should be on the agenda before the meeting starts.

Joining the meeting

• link for participants: https://zoom.us/j/405474359
• For those who just want to watch We stream our conference call straight to YouTube so anyone can listen to it live, it should start playing at https://www.youtube.com/c/nodejs+foundation/live when we turn it on. There's usually a short cat-herding time at the start of the meeting and then occasionally we have some quick private business to attend to before we can start recording & streaming. So be patient and it should show up.
• youtube admin page: https://www.youtube.com/my_live_events?filter=scheduled

[vdeturckheim]

I won't be able to make it this time.

[lirantal]

Will be there

[lirantal]

FYI due to timing with new years events we postponed this to Thursday UTC 3-Jan-2019 16:00 (04:00 PM):

[mhdawson]

Sounds good to me. Updated Calendar.

[mhdawson]

PR for minutes: https://github.com/nodejs/security-wg/pull/470