{"action":"created","issue":{"url":"https://api.github.com/repos/rust-lang/rust-www/issues/156","labels_url":"https://api.github.com/repos/rust-lang/rust-www/issues/156/labels{/name}","comments_url":"https://api.github.com/repos/rust-lang/rust-www/issues/156/comments","events_url":"https://api.github.com/repos/rust-lang/rust-www/issues/156/events","html_url":"https://github.com/rust-lang/rust-www/issues/156","id":96770706,"number":156,"title":"Where is the security mailing list?","user":{"login":"mcast","id":36801,"avatar_url":"https://avatars.githubusercontent.com/u/36801?v=3","gravatar_id":"","url":"https://api.github.com/users/mcast","html_url":"https://github.com/mcast","followers_url":"https://api.github.com/users/mcast/followers","following_url":"https://api.github.com/users/mcast/following{/other_user}","gists_url":"https://api.github.com/users/mcast/gists{/gist_id}","starred_url":"https://api.github.com/users/mcast/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mcast/subscriptions","organizations_url":"https://api.github.com/users/mcast/orgs","repos_url":"https://api.github.com/users/mcast/repos","events_url":"https://api.github.com/users/mcast/events{/privacy}","received_events_url":"https://api.github.com/users/mcast/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-07-23T09:29:02Z","updated_at":"2015-07-23T14:33:25Z","closed_at":null,"body":"(I don't have an issue to report)\r\n\r\nhttps://github.com/rust-lang/rust-www/blob/60c1a1dd37fc173e09459f40dc3b20af29db5b5b/security.html#L70-L72\r\nhttp://www.rust-lang.org/security.html\r\n> Receiving Security Updates\r\n>\r\n> The best way to receive all the security announcements is to subscribe to the Rust security mailing list. The mailing list is very low traffic, and it receives the public notifications the moment the embargo is lifted.\r\n\r\nI couldn't find it from the website.\r\n* If there is still a list, could you add a hyperlink please?\r\n* For the curious surfer looking for old security issues, could you point to them please?\r\n\r\nI found the [internals thread](https://internals.rust-lang.org/t/proposed-security-disclosure-policy/2024) and [the issue tag](https://github.com/rust-lang/rust/issues?utf8=%E2%9C%93&q=label%3AA-security).  The thread mentions a bug that doesn't have the tag, so the security archaeologists will have extra searching to do."},"comment":{"url":"https://api.github.com/repos/rust-lang/rust-www/issues/comments/124125208","html_url":"https://github.com/rust-lang/rust-www/issues/156#issuecomment-124125208","issue_url":"https://api.github.com/repos/rust-lang/rust-www/issues/156","id":124125208,"user":{"login":"steveklabnik","id":27786,"avatar_url":"https://avatars.githubusercontent.com/u/27786?v=3","gravatar_id":"","url":"https://api.github.com/users/steveklabnik","html_url":"https://github.com/steveklabnik","followers_url":"https://api.github.com/users/steveklabnik/followers","following_url":"https://api.github.com/users/steveklabnik/following{/other_user}","gists_url":"https://api.github.com/users/steveklabnik/gists{/gist_id}","starred_url":"https://api.github.com/users/steveklabnik/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/steveklabnik/subscriptions","organizations_url":"https://api.github.com/users/steveklabnik/orgs","repos_url":"https://api.github.com/users/steveklabnik/repos","events_url":"https://api.github.com/users/steveklabnik/events{/privacy}","received_events_url":"https://api.github.com/users/steveklabnik/received_events","type":"User","site_admin":false},"created_at":"2015-07-23T14:33:25Z","updated_at":"2015-07-23T14:33:25Z","body":"We haven't gotten it up yet due to an argument over hosting our own vs Google groups. \n\n> On Jul 23, 2015, at 05:29, Matthew Astley <notifications@github.com> wrote:\n> \n> (I don't have an issue to report)\n> \n> https://github.com/rust-lang/rust-www/blob/60c1a1dd37fc173e09459f40dc3b20af29db5b5b/security.html#L70-L72\n> http://www.rust-lang.org/security.html\n> \n> Receiving Security Updates\n> \n> The best way to receive all the security announcements is to subscribe to the Rust security mailing list. The mailing list is very low traffic, and it receives the public notifications the moment the embargo is lifted.\n> \n> I couldn't find it from the website.\n> \n> If there is still a list, could you add a hyperlink please?\n> For the curious surfer looking for old security issues, could you point to them please?\n> I found the internals thread and the issue tag. The thread mentions a bug that doesn't have the tag, so the security archaeologists will have extra searching to do.\n> \n> ―\n> Reply to this email directly or view it on GitHub.\n> \n"}}