Zsh Mailing List Archive
Messages sorted by:
Reverse Date,
Date,
Thread,
Author
Re: Security
- X-seq: zsh-workers 47759
- From: "Daniel Shahaf" <d.s@xxxxxxxxxxxxxxxxxx>
- To: reportyigit46@xxxxxxxxxxxxxx, gi1242+zsh@xxxxxxxxx
- Subject: Re: Security
- Date: Fri, 25 Dec 2020 16:06:52 +0000
- Archived-at: <https://zsh.org/workers/47759>
- Archived-at: <http://www.zsh.org/sympa/arcsearch_id/zsh-workers/2020-12/a5f44f89-bec5-487d-aee3-8c4eb4f521fa%40www.fastmail.com>
- Authentication-results: zsh.org; iprev=pass (wout2-smtp.messagingengine.com) smtp.remote-ip=64.147.123.25; dkim=pass header.d=daniel.shahaf.name header.s=fm2 header.a=rsa-sha256; dkim=pass header.d=messagingengine.com header.s=fm1 header.a=rsa-sha256; dmarc=none header.from=daniel.shahaf.name; arc=none
- Cc: zsh-workers@xxxxxxx
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= daniel.shahaf.name; h=mime-version:message-id:in-reply-to :references:date:from:to:cc:subject:content-type :content-transfer-encoding; s=fm2; bh=B/ZB2p689cMVZ6z5fYDqSeS6bw VlbdHg430vlDeWH6k=; b=KQ8/Hkczk5VqilD9uaWAI0DmgcmWzhCqSxDFwT58Ds Qsm9DbE3gChSXhEuE0TushsrO4RFjW1xgaYKsQxy6arkqK3+tYzaoeYexBRoftM5 XqR1gRaQmNtli9/vxpmQmC9WZOfxJord2pPmILzIF+/hzw/Bf4aCS4JtABKIhcgO d+GT017euR5YKuJyI0sLvqIPM9gMW+rJtxLYOE6lgNmZNreW6Ac5q8mW60WGnCNI J2WfHhdMPv6GAAq/+OQU6nV1OGTQeNHGxH/Gyzx6XbsGQiDgcJ9oKXYuU1MrCrSN L6w7wa/sTcnmw69p7pCP0+ttyl5VafIM6a/ZEjkAYsrQ==
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-transfer-encoding:content-type :date:from:in-reply-to:message-id:mime-version:references :subject:to:x-me-proxy:x-me-proxy:x-me-sender:x-me-sender :x-sasl-enc; s=fm1; bh=B/ZB2p689cMVZ6z5fYDqSeS6bwVlbdHg430vlDeWH 6k=; b=Nj6wLb8oyycK3hPaB5BaI7oHobEa3vhXNEm6OBaE+dV2WKYBE3trsYcNB 4In/qyBSLRON0EuwpMTIekyA4aGJZJ62GwfPBBCcXEwd9RScTTGEBETXC3hiDobm 88JL0sn+c+vXOTYkyfH2/DcY/YjBnUAOU954mW0rYdRQHQ6H5vBuVr2lnnDW1+KI p5zOQQ+vR02Hti57TTZDniXp0NCjJc/JRUvtwoYfPLoNeChTW9gzVXcnfyvQAEkb 2ntNmrzlFlogBo/VUB2KoyN3v+DXe5vEFlsnLIrF+UWpCEWUtpaxtqighzwhulJt h8UR3LrYbOWX6BlLSzgC10Hk/WuPA==
- In-reply-to: <Uzy4-LW1s3eKrllB-zw35G-ORZsJNQl6uPzDhishTuzE-QC_Hir0nOOi00r5bRdlm-N9GbNJL9gGifBuXxQt8QKlz7yATk4Ah4bxVqOjQKM=@protonmail.com>
- List-archive: <http://www.zsh.org/sympa/arc/zsh-workers>
- List-help: <mailto:sympa@zsh.org?subject=help>
- List-id: <zsh-workers.zsh.org>
- List-owner: <mailto:zsh-workers-request@zsh.org>
- List-post: <mailto:zsh-workers@zsh.org>
- List-subscribe: <mailto:sympa@zsh.org?subject=subscribe%20zsh-workers>
- List-unsubscribe: <mailto:sympa@zsh.org?subject=unsubscribe%20zsh-workers>
- References: <paAbf-KNB0KbNKpcW3QUwRieHYlcjHX1JUBuWrVKyRFxy3huAGdvLPpI3AarFSLDymL3AP4TfrD_Pusx13LQUUoAxYUBOWasBoMDvSPvppk=@protonmail.com> <CAFOazAPaNLP6Yg6krO7mtcSrgoj=+rmg-=Awc-ju8rBfqKykUQ@mail.gmail.com> <9ukE0EnlTIntEcJ7b7nLSoq5E3XfeB-HtfyHk1Vmzoh_NojpSpL_amjhCixUBdb164pmStO4by1oduUBR0zCJpK0xGzrh2uz42flRXt96-8=@protonmail.com> <X+N714veDei3MIVm@andrew.cmu.edu> <Uzy4-LW1s3eKrllB-zw35G-ORZsJNQl6uPzDhishTuzE-QC_Hir0nOOi00r5bRdlm-N9GbNJL9gGifBuXxQt8QKlz7yATk4Ah4bxVqOjQKM=@protonmail.com>
- Sender: zsh-workers-request@xxxxxxx
Sorry for the delay. It sounds like you emailed _only_ Oliver, so he
might simply be on holiday. In any case, to avoid a single point of
failure, please email the details to zsh-infra@xxxxxxx. Thanks!
Note to -workers@: Folks who have dealt with previous security issues
(or are otherwise trusted) and aren't already on -infra@ are welcome to
join. Just send a subscription request the usual way. (And yes,
a separate -security@ list might be a good idea, or at least an alias.)
Cheers,
Daniel
reportyigit46 wrote on Wed, 23 Dec 2020 18:50 +00:00:
> Hello,
> Thank you for contacting me. I was sent issue details. But i can't get answer
>
> Thank you,
>
>
> Sent with ProtonMail Secure Email.
>
> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐
> On Wednesday, 23 December 2020 20:18, <gi1242+zsh@xxxxxxxxx> wrote:
>
> > On Wed, Dec 23, 2020 at 05:53:26AM +0000, reportyigit46 wrote:
> >
> > > I can’t get answer from Oliver. Which one can give me answer?
> >
> > Just FYI -- if you email the devs and tell them the security issue, I'm
> > sure they will handle it and respond. (They are responsive to
> > inconsequential things like color changes; they will certainly respond
> > to security issues.)
> >
> > However, if you email them only saying "I have a security issue", they
> > will likely ignore your message thinking it's spam. I do get one such
> > email every day telling me my account has been suspended and I need to
> > respond "urgently". I usually delete such emails, unless it is coming
> > from an official 100% real Nigerian prince...
> >
> > GI
> >
> > ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> >
> > Wife: "Go to the store and buy a loaf of bread. If they have eggs, buy a
> > dozen."
> > The programmer husband returns with 12 loaves of bread.
>
>
>
>
Messages sorted by:
Reverse Date,
Date,
Thread,
Author