[174692] in North American Network Operators' Group
Re: update
daemon@ATHENA.MIT.EDU (Hugo Slabbert)
Thu Sep 25 00:44:41 2014
X-Original-To: nanog@nanog.org
Date: Wed, 24 Sep 2014 21:41:43 -0700
From: Hugo Slabbert <hugo@slabnet.com>
To: Randy Bush <randy@psg.com>
In-Reply-To: <m2bnq4mjja.wl%randy@psg.com>
Cc: North American Network Operators' Group <nanog@nanog.org>
Errors-To: nanog-bounces@nanog.org
>when do you think the embargo is over?
ref: http://seclists.org/oss-sec/2014/q3/650
"At present, public disclosure is scheduled for Wednesday, 2014-09-24
14:00 UTC. We do not expect the schedule to change, but we may be
forced to revise it."
>Date: Wed, 24 Sep 2014 15:07:26 -0400
>From: Jared Mauch <jared@puck.nether.net>
>To: Randy Bush <randy@psg.com>
>Cc: North American Network Operators' Group <nanog@nanog.org>
>Subject: Re: update
>X-Mailer: Apple Mail (2.1985.4)
>
>Can I presume you’re talking about the bash CVE-2014-6271?
>Date: Wed, 24 Sep 2014 13:09:19 -0600
>From: Spencer Gaw <spencerg@frii.net>
>To: Randy Bush <randy@psg.com>, North American Network Operators' Group
><nanog@nanog.org>
>Subject: Re: update
>User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101
>Thunderbird/31.1.1
>
>See: http://seclists.org/oss-sec/2014/q3/650
Both are > 2014-09-24 14:00 UTC by my count. Unless the embargo got
extended?
On Thu 2014-Sep-25 13:05:45 +0900, Randy Bush <randy@psg.com> wrote:
>> Keeping silent after the embargo is over isn't doing anyone any
>> favors.
>
>when do you think the embargo is over?
>
>yes, it got blabbed. but that does not mean one should be a blabber.
>
>randy
--
Hugo