[Openstack-security] OSSG election electorate -- all pitches together

Kurt Seifried kseifried at redhat.com
Tue Mar 18 08:13:23 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Are we allowed to ask candidates questions? My main one would be: is
the time and effort for you to work with OpenStack being officially
sanctioned by your employer, and if so to what degree. E.g. are you
doing this on your own time, are you being 100% paid/committed to
working with OpenStack, or something in between?

The reason I ask is due to sustainability.

I get that people are passionate about this (otherwise they wouldn't
have stepped up), and qualified (otherwise they wouldn't even be
here), but the time and effort is a serious aspect. And example of
this is the roughly 2 year period where I was something like 1/3 of
all OSS-Security mailing traffic due to handling CVE's (over 1000 a
year). The only reason I could pull this off was because it was part
of my job at Red Hat (I was given both time and resources to do it),
there is no way I would have been able to sustain that commitment on
my own time).

So basically will the candidates have enough time/resources to do this
properly, not just today or tomorrow or next week, but 6 months from
now? Thanks.


- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJTKAAjAAoJEBYNRVNeJnmTMbQQALf71kv2dqjBhu0zz5lICIXL
vNzuR5mAzbHTEpfahEw1WI6TzH/b4FGcSGUXEwxPUNgS7jkFm4UiaSfoeXzm6Bmz
59n2x+SblbX2QsbiWsbnZ92wdWzJDkBqeLsAgYo5E2K6aAJW5laD9yNb/DxTlWFp
RHZfwJhsObr4jOXvqCguKLi+fC1cKokfu0lZmJtmbeLesFWxfdkoc97FGZsFSXXN
CxEWXjXiOAIcb7+0WxhTSN4QEqKGmmeYTEukVJAiQZ2v9rz4qjVQBTJ5YtM9gfZ2
lQbtuzBWGTGgk+L958Uxf/EDwd7jenXur4iVwS6M0xgX/xWt1J4WtwCdQtPfk8Jl
0AD+RgJ7tzdZPPVNfgZVj6sS0Nqn+Zl8H6qKW022P8Sx7rQn8M+jlDEU7ACXL72m
IWQYYIQ20va7k1Yp8p39raE9ZO7d1xzYSxkYxrOJf16kw2v7pC3IxD/CkI0suwZ3
keGc+KZMLGeCYpjTJXWd/TWr+swIAMu6ILfIAxtIYUiJc9uLZ+/D/VOy+jhVLXLX
U7SsPUNqevE+5Y6jcVTmowjhCLPzoG0PTJnBRATaJrLteDKCNQe/21Nj9D0rWjve
ymhMSQvgL0YB5LxCoxnZWak5xLZY99nTFrMMAjXGEmzMhd+t7xqLuuK1fTAv38Bk
/M9NL0eCZJL4N9HZO02F
=XsW0
-----END PGP SIGNATURE-----




More information about the Openstack-security mailing list