Re: Bugsnet

From:	Wim Godden	Date:	Sun, 09 May 2021 15:51:57 +0000
Subject:	Re: Bugsnet
References:	1	Groups:	php.internals
Request:	Send a blank email to internals+get-114317@lists.php.net to get a copy of this message

On 9/05/2021 8:48, Joe Watkins wrote:
I'm aware that bugsnet serves as the disclosure method for security bugs
and github doesn't have a solution to that. Leaving that to one side for
now ...
Just want to weigh in on this item (also mentioned by Stanislav as an important issue). Although Github doesn't provide a way to submit security issues in a private way, there is a way to send people in the right direction for security disclosures. For a simple example : https://github.com/dask/dask-gateway/issues/new/choose where you can see the 3rd item can point to a separate URL explaining how to report security issues. These could either still be submitted to the bugs.php.net or could use a very simple captcha-enabled form (for anti-spam) that sends the report to specific people.

Kind regards,

Wim


   

Thread (40 messages)

• Joe WatkinsSun, 09 May 2021 06:48:54 +0000
  • Sebastian BergmannSun, 09 May 2021 06:55:12 +0000
  • Kalle Sommer NielsenSun, 09 May 2021 07:17:55 +0000
  • Stanislav MalyshevSun, 09 May 2021 07:33:08 +0000Re: Bugsnet
    • Sebastian BergmannSun, 09 May 2021 07:36:52 +0000Re: Re: Bugsnet
    • Joe WatkinsSun, 09 May 2021 07:47:50 +0000
      • Stanislav MalyshevSun, 09 May 2021 08:05:44 +0000
        • Mark RandallSun, 09 May 2021 13:31:09 +0000
        • Pierre JoyeTue, 25 May 2021 14:32:32 +0000Re: Re: Bugsnet
    • Andreas HeiglSun, 09 May 2021 08:08:33 +0000Re: Re: Bugsnet
      • Joe WatkinsSun, 09 May 2021 08:16:42 +0000
    • Rowan TomminsSun, 09 May 2021 08:58:17 +0000Re: Re: Bugsnet
      • Max SemenikSun, 09 May 2021 15:30:03 +0000
        • Rowan TomminsSun, 09 May 2021 21:49:52 +0000
          • Stanislav MalyshevSun, 09 May 2021 23:55:06 +0000
          • Dan AckroydMon, 10 May 2021 13:28:37 +0000
            • Nikita PopovMon, 10 May 2021 15:10:54 +0000
              • Rowan TomminsMon, 10 May 2021 15:58:07 +0000
              • Christoph M. BeckerMon, 10 May 2021 21:22:29 +0000
                • Nikita PopovTue, 25 May 2021 12:57:34 +0000
                  • Christoph M. BeckerTue, 25 May 2021 13:10:06 +0000
                    • Nikita PopovTue, 25 May 2021 13:17:42 +0000
      • Max SemenikSun, 09 May 2021 17:19:51 +0000
      • Mike SchinkelMon, 10 May 2021 01:37:07 +0000
  • André HänselSun, 09 May 2021 08:24:58 +0000RE: [PHP-DEV] Bugsnet
  • Larry GarfieldSun, 09 May 2021 14:25:56 +0000
    • Levi MorrisonSun, 09 May 2021 20:52:11 +0000
  • Jakub ZelenkaSun, 09 May 2021 15:26:31 +0000
  • Wim GoddenSun, 09 May 2021 15:51:57 +0000
  • Benjamin EberleiMon, 10 May 2021 07:56:55 +0000
  • Derick RethansMon, 10 May 2021 09:10:58 +0000Re: Bugsnet
  • Alexander Kurilo via internalsMon, 10 May 2021 12:44:55 +0000
    • Andreas HeiglMon, 10 May 2021 13:39:30 +0000
      • Christoph M. BeckerMon, 10 May 2021 14:12:55 +0000
  • Alexander Kurilo via internalsMon, 10 May 2021 12:44:55 +0000
    • Andreas HeiglMon, 10 May 2021 13:39:30 +0000
      • Christoph M. BeckerMon, 10 May 2021 14:12:55 +0000
  • Remi ColletMon, 10 May 2021 14:12:26 +0000
  • Nikita PopovThu, 21 Oct 2021 15:06:54 +0000
    • Jakub ZelenkaThu, 21 Oct 2021 20:42:15 +0000
      • Nikita PopovThu, 21 Oct 2021 21:46:11 +0000
        • Jakub ZelenkaThu, 21 Oct 2021 22:06:33 +0000
  • Pierre JoyeFri, 22 Oct 2021 04:36:47 +0000Re: Bugsnet