Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id A74F5200CD8 for ; Wed, 2 Aug 2017 19:42:06 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id A5FE3166F01; Wed, 2 Aug 2017 17:42:06 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id E9A861664AF for ; Wed, 2 Aug 2017 19:42:05 +0200 (CEST) Received: (qmail 30544 invoked by uid 500); 2 Aug 2017 17:42:05 -0000 Mailing-List: contact dev-help@datafu.incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@datafu.incubator.apache.org Delivered-To: mailing list dev@datafu.incubator.apache.org Received: (qmail 30395 invoked by uid 99); 2 Aug 2017 17:42:04 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 02 Aug 2017 17:42:04 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id 1AF7BC0221 for ; Wed, 2 Aug 2017 17:42:04 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: -0.121 X-Spam-Level: X-Spam-Status: No, score=-0.121 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-lw-eu.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id 8jZa82kKSi_h for ; Wed, 2 Aug 2017 17:42:03 +0000 (UTC) Received: from mail-pg0-f51.google.com (mail-pg0-f51.google.com [74.125.83.51]) by mx1-lw-eu.apache.org (ASF Mail Server at mx1-lw-eu.apache.org) with ESMTPS id 8CB855FE2F for ; Wed, 2 Aug 2017 17:42:02 +0000 (UTC) Received: by mail-pg0-f51.google.com with SMTP id y129so23903077pgy.4 for ; Wed, 02 Aug 2017 10:42:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :references:in-reply-to:to; bh=Q6aAp1e0O49lSrnjo47hVQxjjsogXSpEShCZtlvlGys=; b=OzEPlld1GTi5PdIQclUPf3zF9BnMOgLrEB4omsKFITrUwaxaEk5qB8sB/xaIeMOobf BdqfjvNYKEFJDO7jO0fmg7mioakz8v9d1mVtEaBRflvryB0djNbE0ZBqyihmGmGwfQ8b CexLA+qxRvCunuQxj5snnu0/ePljP8P4PJMAG1zTFOeWBBRi1zR+KoQkzewjLMZjn4NY tQ6xeMXneYcJQ7scTG3C+Q6evJKznHZF5lAmvYyOHkQ0qezmF67WA3d0TvZKoL6wlI7c QnFRviIvtxeEAa9rYPPjf6uUBPfHaCJH+BPUeY1RuogzEuUM0jqOs0PTUNRLm30/Mpk9 y+BA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:mime-version:date :subject:message-id:references:in-reply-to:to; bh=Q6aAp1e0O49lSrnjo47hVQxjjsogXSpEShCZtlvlGys=; b=XThtbhTpqQ8AyALP8rFG+3TClcIr1TRm4e6NcHtFpo/Tb72KkojhTW26kg2gTTLCUP KT3M8JQ2EanYL9yjbFGRlKvMdNwNoRxrj2yIfvQ4ci7pm1SP3wJXjfokVYFp8MmLBric JoszbAJLXnYklske6ISj64Uey/aiLFP5ayDg9Vf3hF97qjp6KMiV8W6QLwMEKFYHlQnE L76opIFp73M2bVda0BxXsixoSiV/mBpmwatWL5y3Vfuw8YyAa92Ql042SBKBALTi8RvH /Bwrq4F/1X47q96+ZYzbNWVhe+vjGsGEFW4bNlQXXfl+vTCrAB4ragfDn+lsonr/wFXR frYw== X-Gm-Message-State: AIVw112E2pwIbzMrHqVizV6bAsBOV5iC+SJ0d13dQjFLyccbA2MOkVU9 3QqkFYsHnWZxIg+7KGw= X-Received: by 10.99.172.17 with SMTP id v17mr23144873pge.196.1501695720782; Wed, 02 Aug 2017 10:42:00 -0700 (PDT) Received: from ?IPv6:2600:1010:b009:2a19:340a:b3c3:5dfe:6701? ([2600:1010:b009:2a19:340a:b3c3:5dfe:6701]) by smtp.gmail.com with ESMTPSA id u67sm19584664pfd.164.2017.08.02.10.42.00 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 02 Aug 2017 10:42:00 -0700 (PDT) From: Matthew Hayes Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Mime-Version: 1.0 (1.0) Date: Wed, 2 Aug 2017 10:41:59 -0700 Subject: Re: Shepherd Report Message-Id: <702382DC-9CF6-4E3B-A341-AAFABF3A854B@gmail.com> References: In-Reply-To: To: dev@datafu.incubator.apache.org X-Mailer: iPhone Mail (14E277) archived-at: Wed, 02 Aug 2017 17:42:06 -0000 Thanks for pointing this out Dave. I'll write a document today on how to rep= ort issues for DataFu and include a section specifically about how to report= security issues. -Matt > On Aug 2, 2017, at 9:52 AM, David Fisher wrote: >=20 > Hi DataFu: >=20 > It looks like you are about ready to graduate. Congratulations. >=20 > I do have one issue to mention. Something that you need to change quickly.= Reporting of a security issue must not be to JIRA. JIRA is not secure. Secu= rity issues must be reported privately. Either you can refer to the Foundati= on wide security@apache.org or you can use your private@datafu list. >=20 > Regards, > Dave