On Tue, 14 Mar 2006 11:11:12 +0100 Gerhard Killesreiter wrote:
I guess a letter of introduction to the security list would be a good thing to do.
by which you mean sending email to "security@drupal.org"? based on reading the docs i could find, it doesn't look like that's a list just anyone can subscribe to (for good reason). so, if we want to help, we just send something there, say who we are, what skills/resources we have, offer our services, and wait for someone to contact us with something to do? just trying to get a better sense of what the security team has in mind for "outside" help. guidelines like this would be useful so that folks who want to help don't generate more work by sending too little or too much info, or send it to the wrong place. thanks, -derek