| 12 May 2024 |
ronef | I'll try to fetch them a bit later today (on planes today) | 20:41:09 |
@joepie91:pixie.town | that's fine, just wanting to make sure it's known about, in case it doesn't make it past the spam filters :) | 20:43:48 |
| @yuka:yuka.dev joined the room. | 21:37:21 |
@yuka:yuka.dev | Hi, please confirm you have received my application | 21:43:38 |
| 13 May 2024 |
ronef | confirmed | 02:43:12 |
@theophane:hufschmitt.net | I'm going through the unpublished applications right now | 04:02:31 |
@theophane:hufschmitt.net | ( joepie91 🏳️🌈, Yureka (she/her): I confirm that I have both of yours) | 04:03:32 |
@theophane:hufschmitt.net | And done! | 04:48:36 |
infinisil | Damn, lots of applications, very happy with the turnout! | 05:25:15 |
@yuka:yuka.dev | It bothers me that the markdown formatting of my application has been half lost | 06:29:19 |
@theophane:hufschmitt.net | In reply to @yuka:yuka.dev It bothers me that the markdown formatting of my application has been half lost Yes, sorry about that. I did some best-effort reformatting to make the applications look OK on Zulip, but I couldn't fine-tune them, ans Zulip's markup is quite strict apparently. Feel free to send a better version, I'll update the post. | 09:51:39 |
@theophane:hufschmitt.net | (Ideally as a Zulip DM so that the markup is provably correct 🙃) | 09:52:04 |
| martijn left the room. | 16:06:18 |
| Arian left the room. | 17:38:20 |
| 14 May 2024 |
| @edsoncsouza:matrix.org joined the room. | 08:57:21 |
| chrillefkrr joined the room. | 15:41:37 |
| infinisil changed their profile picture. | 17:44:39 |
| @james:gec.im joined the room. | 21:53:03 |
| 15 May 2024 |
| K900 joined the room. | 08:31:39 |
K900 | Hey folks, I've had a few people ask for my vouch on the assembly applications, so I wrote some words and sent them to the foundation@ email | 08:32:05 |
@drupol:matrix.org | Redacted or Malformed Event | 09:05:55 |
| jowburner joined the room. | 12:32:00 |
| @johannes.kirschbauer:scs.ems.host joined the room. | 19:25:24 |
| lassulus changed their profile picture. | 19:31:14 |
| jottr joined the room. | 21:16:59 |
| 16 May 2024 |
ronef | As promised (can't believe we did this in two weeks), the announcement regarding the selection of the Constitutional Assembly is here - https://discourse.nixos.org/t/nixos-foundation-board-constitutional-assembly-appointment/45504
Thank you again to everyone that cared, took time, is taking time to make this progress ❤️ | 03:30:43 |
| kayh joined the room. | 14:59:22 |
Dusk | Colin: Just read that you were looking for this in the Zulip. Here's the NixOS.org iCalendar file. https://calendar.google.com/calendar/ical/b9o52fobqjak8oq8lfkhg3t0qg%40group.calendar.google.com/public/basic.ics | 17:55:33 |
| piegames left the room. | 18:57:17 |
fricklerhandwerk | Hi everyone, I got an email that the Sovereign Tech Fund extended an invitation to the Bug Resilience Program, because we participated in last year's Contribute Back Challenge, which means that Nix/Nixpkgs/NixOS is considered critical infrastructure.
Very briefly, the offer is:
- Developer time provided by a software consultancy
- Get hosted on YesWeHack with a bug bounty program, and get an unspecified amount of funding to pay bounties
- Get security audits conducted by OSTIF
As these are largely in-kind contributions, those require resources to get accepted. Is there interest in the security community to capture that influx of attention?
The applications are "first come first serve", so if the general sentiment is that we should pursue it, that decision and a write-up should happen very soon (presumably on the order of days). In particular we would have to define a scope to which the audits and bug bounties extend. A natural choice would be C++ Nix, but it could in principle also be the Nixpkgs/NixOS code base or our contribution workflows.
What do you think? I also posted this on Nix Hackers since getting developer time is something we wanted for many months now, and Security Discussions since it's about security.
| 19:18:59 |