Skip To Main Content
Hi Seth on Muck Rack

Hi Seth

Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile
Back to Hi Seth’s profile

Articles by Hi Seth

Re: linux-distros list policy and Linux kernel, again

|
By Hi Seth, has four CNAs, Whereas "Distributions
| seclists.org
oss-sec mailing list archives From: Solar Designer <solar () openwall com> Date: Sat, 26 Aug 2023 23:49:14 +0200 Hi Seth, Thank you very much for your feedback. I wouldn't have guessed you feel that way about some of this. On Sat, Aug 26, 2023 at 02:31:29AM +0000, Seth Arnold wrote: On Sat, Aug 26, 2023 at 12:23:59AM +0200, Solar Designer wrote: I'd appreciate any well-reasoned votes and constructive suggestions. Maybe there are good ideas that didn't cross my mind yet.
Open in Who Shared Issue with article?

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

|
By Jacques Le Roux, Hi Seth, Hello Jacques
| seclists.org
oss-sec mailing list archives From: Jacques Le Roux <jacques.le.roux () les7arts com> Date: Wed, 19 Apr 2023 08:25:36 +0200 Hi Seth, As I guess you know, the ASF has many (350+) projects: https://projects.apache.org/ OFBiz is only one of these projects. An "old" one, IIRW it was the 26th to get in. I say that because we have our own security team. Yet, all projects are overseen and especially helped by the ASF security team for security matter.
Open in Who Shared Issue with article?

Re: CVE-2022-47501: Apache OFBiz: Arbitrary file reading vulnerability

|
By Jacques Le Roux, Hi Seth, on Mon, Hello Jacques
| seclists.org
oss-sec mailing list archives From: Jacques Le Roux <jleroux () apache org> Date: Tue, 18 Apr 2023 11:15:52 +0200 Hi Seth, I used to give more information. For this one, using our "new" internal process* (need an ASF credential) and following step 11 of**, notably <<Generally, reports should contain enough information to enable people to assess the risk the vulnerability poses for their own system, and no more.>> I restricted the information to a minimum.
Open in Who Shared Issue with article?

Re: CVE-2022-38170: Apache Airflow: Overly permissive umask for deamons

|
By Hi Seth, on Fri, Jed Cunningham
| seclists.org
oss-sec mailing list archives From: Jed Cunningham <jedcunningham () apache org> Date: Tue, 20 Sep 2022 13:56:47 -0600 Hi Seth, Thanks for the feedback, and I agree. We will start adding links to the PR fixing the issue going forward, starting with our announcements today.
Open in Who Shared Issue with article?

Re: snowflakedb security contacts

|
By Roxana Bradescu, Hi Seth
| seclists.org
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: Roxana Bradescu <roxxbee () gmail com> Date: Sun, 24 Jul 2022 11:10:35 -0700 Hi Seth, did you ever get a response from anyone at Snowflake?
Open in Who Shared Issue with article?

Re: linux-distros list policy and Linux kernel

|
By Jason A. Donenfeld, Hi Seth, Linux developers
| seclists.org
Nmap Announce Nmap Dev Full Disclosure Security Lists Internet Issues Open Source Dev oss-sec mailing list archives From: "Jason A. Donenfeld" <Jason () zx2c4 com> Date: Tue, 17 May 2022 13:10:16 +0200 Hi Seth, On Tue, May 17, 2022 at 03:30:33AM +0000, Seth Arnold wrote: I think playing CVEs with the kernel (and possibly other humongous projects too) is in large part a fool's errand.
Open in Who Shared Issue with article?
Show More