The debian-private mailing list leak, part 1. Volunteers have complained about Blackmail. Lynchings. Character assassination. Defamation. Cyberbullying. Volunteers who gave many years of their lives are picked out at random for cruel social experiments. The former DPL's girlfriend Molly de Blanc is given volunteers to experiment on for her crazy talks. These volunteers never consented to be used like lab rats. We don't either. debian-private can no longer be a safe space for the cabal. Let these monsters have nowhere to hide. Volunteers are not disposable. We stand with the victims.
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: developer criteria

-----BEGIN PGP SIGNED MESSAGE-----

[ Please don't Cc: me when replying to this message on a mailing list ]

Bruce Perens writes:

> I am considering some criteria for developers. Response time is one we
> should formalize. This is something we can probably get away with now
> that we have enough developers to be able to afford some winnowing.
> Response time for security bugs should be no more than a week, for
> pre-known release issues no more than a month, for post-release
> gotchas that break a package badly, again no more than a week.

I would suggest two weeks for security bugs.

Something that we should consider is that using too short of a period
may result in poorly-written or ill-conceived fixes.  For example,
lately, a lot of security problems are "fixed" by removing the service
in question.

It also may be preferrable to wait for a real fix than waste the
developer's time by requiring him to release a partial fix now and a
real fix later.

- -- 
Daniel Quinlan (quinlan@pathname.com)   At work (quinlan@transmeta.com)
http://www.pathname.com/~quinlan/       Please don't Cc: me when replying      
PGP key available - http or finger	to this message on a mailing list.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3
Charset: noconv

iQCVAwUBMuMqAKkybebRDjw1AQH54wP9HCNdetTFoj8xfdyTIrnCq8KtGhTHBjtV
wLFD462ANrYc2aRv4zJ5QpA934mwIFaQBa6Et0Aq8bKjWyBTOY5PfLxXOiydD/i9
BuQpJJXvQNOq/PLbldrNtpEwuGxCmzvOUbQMPho3E4rWnlaP6OqNYfxcPxBcszWB
G+orAB/TgmE=
=WIot
-----END PGP SIGNATURE-----


--
Please respect the confidentiality of material on the debian-private list.
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-private-REQUEST@lists.debian.org . Trouble? e-mail to Bruce@Pixar.com