4 ms·
The timing of this and the wording of their announcement leads me to think that they weren't included in the select group of people who are brought up to speed
by click170 12y ago
The timing of this and the wording of their announcement leads me to think that they weren't included in the select group of people who are brought up to speed with the Xen security update before it's released.
The next question then is, who does have access to this? It definitely needs to be kept wrapped-up at least until the large vendors are patched, but who gets to decide who's a large vendor?
- kam 12y agoThe Xen pre-disclosure list is public, and Rackspace is on it: http://www.xenproject.org/security-policy.html http://www.xenproject.org/security-policy.html They also spell out the policy for who is eligible.
- chrissnell 12y agoThanks for the link. Given that Amazon was notifying customers as early as two days ago, we can assume that Rackspace received notification from Xen at least two days ago. They waited until Friday night to announce this? Awful.
- Maxious 12y agoprgmr.com also got inducted 2 days ago http://blog.prgmr.com/xenophilia/2014/09/prgmrcom-now-on-xen-hypervisor.html http://blog.prgmr.com/xenophilia/2014/09/prgmrcom-now-on-xen... Xen has previously had problems with people leaking embargoed security issues http://www.gossamer-threads.com/lists/xen/devel/248239 http://www.gossamer-threads.com/lists/xen/devel/248239
- pcarmichael 12y agoAny word on if/when Linode may schedule reboots?
- kbar13 12y agohttps://forum.linode.com/viewtopic.php?p=64914#p64914 https://forum.linode.com/viewtopic.php?p=64914#p64914