security review and patches for libpurple

Jacob Appelbaum jacob at appelbaum.net
Tue Jul 19 00:41:17 EDT 2011


On 07/18/2011 11:58 PM, Chris Palmer wrote:
> On Jul 17, 2011, at 2:45 PM, Dan Auerbach wrote:
> 
>> Chris Palmer and myself are the primary people on the EFF side, and
>> Jake has been very helpful in assisting in the first round of
>> patches. I can't speak for either of them, but I'm not at all
>> worried about appropriate recognition---really anything is fine.
>> Much more important is having a good relationship with you and the
>> Pidgin team so we can work together for this and future
>> security-related patches.
> 
> Thank you Ethan! I agree with Dan, we are pretty low-key. I am happy
> with something simple like a note in the commit log saying something
> like "based on a bug report and/or patch from EFF" or the like.
> 

I'd say the same:
"based on a bug report and/or patch from Noisebridge"

All the best,
Jacob


More information about the security mailing list