[nsp-sec] unsubscribing

Tue Sep 4 12:01:58 EDT 2012

Rob, I meant that Rodolfo shouldn't have forwarded emails internally to someone not vetted to the list. Thus he was expected to work on the issues personally or ask the author for permission to foward internally. However what he did was within the understanding that many have that a proxy ack implies your forwarding. I am ok with that. But it doesn't really meet some of our expectations. His explaination is below. I am not faulting him for anything other than a possible techical difference between what is expected and what is being done.

So the qwestion to the community is:

If I proxy your posting in order to clean up downstreams without mentioning you specifically is that acceptable?

If so should we change the charter to cover that? I lean towards YES!

Understand I think what Rodolfo did is common on this list and was intended to meet the basic functionality of this list. His intent was clearly intended to be helpful to the overall cause. I just don't think our current sharing framework allows for it.

________________________________________
From: Rodolfo Baader [rbaader at arcert.gov.ar]
Sent: Tuesday, September 04, 2012 8:37 AM
To: Smith, Donald; Rafi Sadowsky; Rob Lowe
Cc: Rodolfo Baader
Subject: Re: [nsp-sec] membership criteria [WAS unsubscribing]
Hi Donald, Rob, Rafi & all,
* Could one of you please forward this message to nspsec list,  because I'm
already unsubscribed from it. Thank you.

Just to clarify,
I was invited to become a member of NSP-SEC, after various face-to-face
interactions with a lot of people from the FIRST community. In most of
this meetings I was there with Gastón, but I was invited to join the list
because I was more involved with the incident handling process. I´m almost sure
that everyone that vouched for me would've vouched for him also.
My commitment with the interests of this community and to make Internet
safer for all, were always present.
Additionally, I have not forwarded all emails circulating on the list.
I've only resent those who had information about incidents that
required treatment in Argentina because ArCERT, acting as a National
CSIRT, was reporting the relevant parts to each AR ASN (without
revealing the source of information). You can see my ACK emails, where
I reported what was done: "Proxy ACK for AR ASNs".
Finally, may be you're right and we should have reinitiated the whole process of
getting people vouch for Gastón. My apologies for this.
Rodolfo.

(coffee != sleep) & (!coffee == sleep)
 Donald.Smith at centurylink.com

________________________________________
From: nsp-security-bounces at puck.nether.net [nsp-security-bounces at puck.nether.net] on behalf of Rob Lowe [rlowe at redhat.com]
Sent: Sunday, September 02, 2012 8:37 PM
To: nsp-security at puck.nether.net
Cc: rbaader at arcert.gov.ar
Subject: Re: [nsp-sec] unsubscribing

----------- nsp-security Confidential --------

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Donald,

On 01/09/12 02:08, Smith, Donald wrote:

> Trust is personal not institutional. Did you somehow misunderstand
> the nature of this list?

The NSP-SEC listinfo states that:

"All posts to NSP-SEC must have an organizational affiliation via
either a corporate email address that is identifable as an ISP/NSP, or
via a signature that includes your organizational affiliation or ASN."

So, as I understand it, Rodolfo has acted correctly here and is
(unfortunately) no longer eligible to continue his membership in
NSP-SEC. However, he is still eligible for NSP-SEC-D.

Regards,
Rob.

- --
Rob Lowe                      | Red Hat Asia-Pacific
Information Security Analyst  | http://www.redhat.com
Phone: +61 (0)7 35148244      | rlowe at redhat.com
5272 504B 6A97 415C 2EB2  E7B9 EDE4 0A83 CD9F E7A4

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
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=1PpE
-----END PGP SIGNATURE-----

_______________________________________________
nsp-security mailing list
nsp-security at puck.nether.net
https://puck.nether.net/mailman/listinfo/nsp-security

Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
community. Confidentiality is essential for effective Internet security counter-measures.
_______________________________________________