14:08:09 <Sparks> #startmeeting Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings 14:08:09 <zodbot> Meeting started Thu Dec 17 14:08:09 2015 UTC. The chair is Sparks. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:08:09 <zodbot> Useful Commands: #action #agreed #halp #info #idea #link #topic. 14:08:09 <zodbot> The meeting name has been set to 'security_team_meeting_-_agenda:_https://fedoraproject.org/wiki/security_team_meetings' 14:08:12 <Sparks> #meetingname Fedora Security Team 14:08:12 <zodbot> The meeting name has been set to 'fedora_security_team' 14:08:14 <Sparks> #topic Roll Call 14:08:16 * Sparks 14:08:20 * d-caf 14:08:47 <Sparks> mhayden jsmith zoglesby: We're starting 14:08:58 <mhayden> .hello mhayden 14:08:59 <zodbot> mhayden: mhayden 'Major Hayden' <major@mhtx.net> 14:09:41 * jsmith is in a ${DAYJOB} meeting, but will try to multitask 14:10:51 * Sparks notes that this meeting does not require himself and encourages others to take the reigns when necessary. 14:11:24 * d-caf Notes Sparks thoughts... 14:12:15 <Sparks> Okay, lets get started 14:12:29 <Sparks> #info Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" 14:13:07 * Sparks is going to avoid previous weeks' tasks for today since he doesn't have any update on them 14:13:14 <Sparks> #topic Education and Training 14:13:21 <Sparks> #link https://fedoraproject.org/wiki/Information_Security_Training 14:14:29 <Sparks> I'm working on an internal-to-Red-Hat certification process for people in Product Security. I'm thinking about extending it into the Fedora realm if we're interested. 14:14:54 <d-caf> Is this trust certification or skill certification? 14:15:10 <Sparks> skill 14:15:17 <rsc> How would this look like and how about costs for Fedora people? 14:15:51 <jsmith> Sparks: Definitely interested :-) 14:15:59 <mhayden> nice 14:16:02 <Sparks> rsc: This would be free. 14:16:17 <Sparks> rsc: Except, perhaps, for some of the resources used. 14:16:40 <rsc> Sparks: sounds cool (just asked because Red Hat certifications/trainings are usually expensive) 14:16:43 <Sparks> rsc: I'm trying to make sure that all the resources that I pick are available from the public library system in the US. 14:17:02 <rsc> Sparks: ahh...how does this work in EMEA/APAC then? 14:17:04 <d-caf> If we tie it inot the Apprenticeship program that would be helpful #link https://fedoraproject.org/wiki/Security_Team_Apprenticeship 14:17:18 <d-caf> which I've been putting some stuff together, but haven't added to the wiki yet 14:17:47 <Sparks> rsc: The same, I just can't guarantee free access to books (see the above link). 14:18:12 <Sparks> d-caf: Yes, I'll try to copy over what I've been working on for PS to our wiki. 14:18:17 <Sparks> ...today 14:18:17 <rsc> Sparks: so we talk about online library systems? That would be fine, too. 14:19:15 <Sparks> rsc: One of the texts I use is the "Hacking Exposed" book. Very good resource but I can't guarantee that it'll be available in all public libraries. 14:19:24 <Sparks> rsc: Applied Cryptography is another. 14:19:41 <Sparks> rsc: Perhaps there will be some personal copies that could be shared. 14:19:53 <d-caf> Sparks: rsc: Security Engineering is another good one 14:20:09 <d-caf> and free online pdf's as well (buy the book if you can to support the author..) 14:20:26 <Sparks> d-caf: Can you add that to the page? I've got so many resources I'm looking at I don't know if that one is on my list, yet. 14:20:33 <d-caf> yes 14:21:07 <d-caf> #link http://www.cl.cam.ac.uk/~rja14/book.html 14:21:21 <d-caf> Can't edit the wiki at the moment, but will add it later 14:21:30 <Sparks> #action Sparks to copy the PS Certification information over to the Fedora wiki for further review 14:21:35 <Sparks> d-caf: Thanks 14:21:45 <Sparks> Anyone have anything else training-related? 14:22:13 <Sparks> #topic Apprenticeship 14:22:21 <Sparks> #link https://fedoraproject.org/wiki/Security_Team_Apprenticeship 14:22:34 <Sparks> This really folds into the previous discussion. 14:22:58 <Sparks> I'll try to populate this today and we'll come back to it next time. 14:23:23 <Sparks> #topic Security Team Fedora Activity Day 14:23:33 <d-caf> I'll try and merge my stuff in with yours 14:23:38 <d-caf> on previous topic 14:23:43 <Sparks> d-caf: Thanks 14:24:04 <Sparks> Last time we started talking about a FAD in the Washington DC area... 14:25:03 <Sparks> #link http://whenisgood.net/8fshcdf/results/9czp49s 14:25:04 <d-caf> have 4 people added tothe WhenIsGood 14:25:30 <Sparks> jsmith: I noticed you only added January dates. Are February and March completely out? 14:25:54 <jsmith> Sparks: Oooh, I didn't know you were looking at February/March 14:26:04 <jsmith> Sparks: I'm open all of February/March, as far as I know. 14:26:19 <jsmith> Sparks: (Unless I get to speak at Devconf in Brno) 14:26:22 <Sparks> jsmith: Okay, could you edit your response, please? 14:26:30 <jsmith> Sparks: If I can find the link... 14:26:59 * Sparks points up 14:27:33 <d-caf> Somewhat related to this is there anyone else going to ShmooCon, specially out of town folk, that would make it convienit to schedule a FAD around that time? 14:27:48 <Sparks> d-caf: Could. When is it again? 14:27:52 <jsmith> Sparks: Done... 14:27:53 * Sparks did not get tickets 14:28:05 <d-caf> Jan 15-17 14:28:09 * jsmith did not get tickets either 14:28:31 <Sparks> d-caf: Appears that we're not all available around then. 14:28:48 <d-caf> Well, there is the 18th 14:29:18 <Sparks> #info Sparks is looking into a videoteleconferencing option for the event to accomidate distance folks. 14:29:46 <Sparks> d-caf: True, although I'm wondering if we'd want to meet for a couple of days. Maybe not... 14:30:06 <Astradeus> Sparks: yey :) 14:30:10 <Sparks> jsmith: Are Tuesdays out? Hard stop? 14:30:34 <jsmith> Sparks: No, but most of my ${DAYJOB} meetings are on Tuesdays, so I'd likely be distracted 14:30:38 <Sparks> Astradeus: We used BlueJeans for the Docs FAD we had a few years ago and that seemed to work well. 14:30:45 <jsmith> Sparks: Of course, if I change jobs, all bets are off... 14:30:50 <d-caf> I tend to have a lot of meetings Monday/Tuesday, but sometimes can get out of them 14:31:04 * jsmith will do his best to be flexible 14:31:10 <Sparks> jsmith: Ditto. I'd have to cancel a bunch of stuff to be available on a Tuesday 14:32:28 <Sparks> Okay, we'll continue to work on this and there will be discussion on the list. 14:32:47 <Sparks> #topic Open floor discussion/questions/comments 14:33:18 <Sparks> Next week's meeting falls on Christmas Eve. I suspect many of us will be off work or otherwise detained. Cancel? 14:34:41 <Astradeus> guess so. i'll be around though if a meeting comes up :) 14:34:43 <d-caf> I will likely miss the meeting 14:36:20 <jsmith> +1 to cancel 14:36:46 <Sparks> #agreed Next week's meeting will be cancelled. 14:36:53 <Sparks> Does anyone have anything else? 14:37:18 <mhayden> not i 14:37:30 <d-caf> one thing 14:37:46 <d-caf> I may have access to a few Shmoocon tickets 14:38:03 <jsmith> d-caf: OK, please let us know if you do 14:38:03 <d-caf> Who would be interested if I get them? Would be at cost 14:38:15 <Sparks> d-caf: What's the cost? 14:38:28 <jsmith> Depends on the cost... 14:38:29 <d-caf> Shmoocon charges $150 per ticket 14:38:59 <d-caf> #link http://shmoocon.org/general-information/ 14:39:58 <Sparks> d-caf: I might be able to swing that. I can't be certain right now, though. 14:40:20 <jsmith> Yeah, I'm on the fence too... but let me know if you can get tickets, and I"ll make a quick decision 14:40:21 <d-caf> Not talking about a lot of tickets, at most 2 or 3 (not counting mine) 14:41:24 <Sparks> okay 14:41:58 <d-caf> so Sparks and jsmith are interested 14:44:07 <Sparks> d-caf: You might contact zoglesby as he might be interested as well 14:44:23 <Sparks> Okay, anyone have anything else? 14:44:37 <d-caf> Sparks: I'll reach out to him 14:44:44 <d-caf> him/her 14:44:51 <d-caf> whom 14:44:53 <d-caf> :-) 14:44:54 <Sparks> Him... Zach 14:46:37 <Sparks> Anyone have anything else? 14:49:10 <Sparks> Hearing none... We'll go ahead and close the meeting for today. 14:51:04 <Sparks> Thanks, everyone, for coming out today! 14:51:08 <Sparks> #endmeeting