[wp-forums] Security Alerts

[Scott Merrill]

Matthew Mullenweg wrote:
> Lorelle VanFossen wrote:
> 
>> How should these issues be dealt with? Are there sites which announce
>> such security alerts that need to be monitored so we can be better
>> informed? Is it better that "we" post first than just wait for someone
>> to panic? How do we get these things confirmed and know if this is
>> valid or just a scare? I'm sure you all have more questions and we all
>> need answers to how this should work.
> 
> 
> On the forums please just:
> 
> 1. Tell them to send a message to security at wordpress.org

http://wordpress.org/support/topic/41464#post-233351

> 2. Close the thread

Hrm.

> Discussion is seldom productive in these situations. If there is
> actually a problem (which isn't all the time) we'll make a release as
> soon as possible.

True, discussions can devolve quickly; but we also run the risk of being
accused of trying to "hush up" real criticisms of the software.

-- 
skippy at skippy.net | http://skippy.net/

gpg --keyserver pgp.mit.edu --recv-keys 9CFA4B35
506C F8BB 17AE 8A05 0B49  3544 476A 7DEC 9CFA 4B35