►
From YouTube: Education SIG (November 2, 2022)
Description
Meeting minutes: https://docs.google.com/document/d/1Lt8uGpiMFfgws8VF36xtTMaJAeHufha-7Dqz1tjrPGY/edit
A
A
A
F
Hey
folks,
my
name
is
Max
mitzel
I
work
for
MLA
Major,
League,
hacking
I'm
here
for
the
first
time
today,
I
have
had
conversations
a
number
of
people
in
in
this
group
in
some
of
the
wider
groups.
I'm
very
excited
to
be
here
learn
more
find
out
how
the
Battle
of
your
objectives
and
yeah
really
really
hopeful
that
we
might
be
able
to
to
contribute
to
the
the
great
work
that
you
will
want.
A
A
We
have
a
couple
opens
we'll
get
to
in
just
a
few
moments.
Let's
briefly
go
through
the
Section
updates.
Dave
is
out
with
a
family
matter.
So
I'll
talk
about
section.
One
section
one
met
last
week
talked
about
the
Matrix
which
we'll
talk
about
here
as
a
full
group
here
shortly,
and
we
also
went
through
and
I
started,
reorganizing
the
layout
of
the
plan,
so
that
it
is
more
consistent
and
preparing
us
to
start
to
file
a
bunch
of
issues
for
each
of
the
goals.
A
We
are
interested
in
I'll
post,
a
link
to
first
plan
section.
If
you
want
to
take
a
look
to
see
the
style
we'd
like
to
get
the
other
sections
molded
into
where
we're
clearly
marking
milestones,
providing
details
about
what
we
need
to
do
to
achieve
those
milestones
and
then
even
ultimately,
we'll
have
an
issue
filed
for
each
milestone.
C
C
So
that
was
actually
that
for
now
yeah,
so
we
do
meet
actually
also
a
part
of
the
Normal
public
meetings.
I
must
say
to
to
keep
speed
and
movement.
We
do
meet
quite
a
lot
also
when
there
is
time
so
maybe
it
would
be
an
idea
to
also
invite
the
people
of
stream
too
into
a
separate
Slack
if
you're
interested
in
working
on
education
and
the
platform
Etc.
C
H
A
B
I
If
I
can
can
add,
you
know
related
to
the
whole
incentives
thing.
There's
a
plan
to
meet
I
mean
between
myself
and
Sal,
and
Clyde
super
sad
and
Samina
Passat,
trying
to
discuss
some
some
things
involving
incentivizing
in
particular,
I
thanks
to
Xavier.
It
turns
out
that
Samina
Passat
is
probably
the
right
person
within
GitHub
to
try
to
go
through
the
whole,
showing
hey
you've
got
a
badge.
Clyde
sieber
says
the
lead
of
the
Linux
foundation's
train
certification.
I
You
know
division
so
who
who
can
help
us
point
out
things
like?
How
do
you
get
information
about?
You
know
various
people
when
it's
public
so
we're
we're
trying
to
connect
the
pieces,
the
the
people
together
to
make
it
all
work
out.
I
mean
just
to
be
clear:
GitHub
hasn't
committed
to
do
anything.
Particular
you
know,
but
you
know,
Step
One
is
talking
getting
the
right
people
together
and
then
going
from
there.
I
B
I
I
A
A
If
you
take
a
look,
we
have
we're
going
to
be
organizing
and
categorizing
our
training
based
off
of
these
personas,
these
types
of
Learners.
These
are
different
areas
of
learning,
and
this
is
going
to
help
us
eventually
make
learning
paths
or
be
able
to
have
that
tiered
or
focused
education
pathway
for
people.
A
A
This
is
how
we
plan
on
organizing
the
material
we
find
so
that
this
is
key
to
section
one,
which
section
two
is
very
excited
to
be
waiting
on.
So
basically
any
type
of
educational
artifact
we'd
like
to
have
that
noted,
have
a
link
to
it,
have
a
description
about
what
it
is.
Is
it
a
class?
Is
it
a
lab?
Is
it
a
presentation,
a
podcast,
you
know
it's
the
different
categories
and
each
one
of
these
columns
has
either
a
drop
down
or
a
tick
box,
depending
on
what
we're
looking
for.
A
So,
if
we're
looking
at
a
so,
for
example,
hacking,
web
and
API
from
oasp,
you
know
that's
class
and
we
would
go
left
to
right
ticking
off
what
domains
we
feel
are
relevant
for
this
particular
thing
which
of
the
personas
are
relevant.
If
there's
a
language
that
is
applicable
or
multiple
languages,
we
would
like
to
note
that.
A
So
if
there's
something
this
Java
or
C,
we
just
like
to
flag
that
or
if
it's
more
just
Universal
development
practices
and
we'd
like
to
have
it
noted
in
column,
A
D,
the
date
we
updated
that
last
just
so,
we
know
how
fresh
that
entry
is
or
when
it
changed,
and
then
column
AE.
If
you
could
just
note,
if
you're
the
person
that
made
this
entry
that
way,
if
we
have
questions,
we
can
Circle
back
to
it's,
not
that
you
own
that
training
or
we
need
you
to
do
anything.
A
I
A
C
A
I
A
J
A
J
Would
you
want
to
interrupt
but
I
had
to
ask
an
offline
comment
on
maybe
an
I
tag,
maybe
Dave
on
this
about
because
I've
tested
it
and
tried
to
put
in
some
stuff
myself
and
I
came
across
free,
not
free,
so
free
only
is
that
what
we're
moving
towards
at
the
moment,
because
otherwise
we're
going
to
need
this
is
free,
open
source.
This
is
a
paid
course.
Okay,.
H
J
J
So
what
does
the
group
feel?
Do
you
want
to
add
a
column?
Maybe
we
should
do
that
for
Thursday's
conversation,
I
I
apologies,
I,
missed
last
week's
with
blood,
with
clashes
on
meetings.
I
need
to
duplicate
myself
some
days
so
anyway.
I
just
wanted
to
give
you
a
heads
up
of
my
concern
with
coming
across
off
missing
stuff,
because
I
know
we
had
earlier
conversations
actually
in
this
sick
meeting
with
regard
to
having
budget
for
paid
resources
as
well.
A
A
J
K
Yeah
I
just
wanted
to
I
was
going
to
add
on
to
the
to
the
fee,
based
with
the
because
you've
got
things
like
udemy.com
and
some
of
those
other
ones
out
there
that
are
I
mean
13
bucks.
You
can
buy
a
40
hour,
cyber
security
course
or
programming
course,
which
is
which
which
isn't
bad
and
it's
and
and
I,
find
it
to
be
pretty
informative.
A
A
A
J
My
hand
down
and
put
it
back
up
again
just
again
when
I
was
actually
filling
out.
For
example,
I
just
wanted
to
clarify
before
I
spam,
this
document
a
safe
code,
training
that
one
link
leads
to
many
training
courses.
So
are
we
only
looking
for
one
higher
level
link
or
do
we
want
now
to
spam
a
spreadsheet
with
50
courses
from
Safeco
training?
It
doesn't
make
sense
to
me
me,
you
know.
J
Maybe
we
can
think
about
that
as
well.
Are
we
just
at
the
moment,
collecting
higher
level
resources
and
then
having
a
hierarchy
of
lower
train
courses
within
that
the
safe
code
is
a
good
example.
Actually
it
leads
to
many
different
courses
if
you
want
to
have
a
look
and
we
can
discuss
it
offline
or
at
our
next
course,
but
it's
just
for
ease
of
use
of
the
spreadsheet.
Also
ease
of
use
of
whomever
is
going
to
be
reviewing
this
or
reviewing
it
together.
Sanity
check-in.
C
Well,
I
was
just
thinking
out
loud,
but
I
think
the
idea
is,
you
know,
okay,
to
have
like,
indeed
the
the
cost
of
trading,
if
it's
free
or
not,
Etc,
okay.
That
sounds
interesting,
but
the
whole
idea
is
to
have
open
source
material
that
we
then
can
consume
and
make
available
in
the
platform
right.
So
so
only
a
link
yeah
it
will
help,
but
in
the
in
the
end
the
librarian
or
had
that
person
that
will
curate
and
check
the
content
will
then
break
it
down,
hopefully,
in
a
in
a
right
form.
C
J
Oh
yeah
I
just
put
the
link,
maybe
I
I
didn't
clarify
very
well
what
I
was
trying
to
say
so.
I
just
put
the
link
into
the
chat
of
the
safe
code,
training
that
I
was
speaking
about.
So
all
the
courses
listed
in
that
would
be
like
those
individually
listed
on
the
spreadsheet
are
just
one
link
to
safe
code
training.
That
was
my
my
question.
I
suppose.
J
I
Same
my
understanding
and
really
Chrome
it's
it's
my
eyeballs
going
two
different
many
places
and
I
may
have
pulled
my
eye
off
the
ball
on
this,
but
my
understanding
is
the
next
step
after
this
is
trying
to
figure
out.
Okay,
do
we
have
you
know
if
somebody
wants
to
take
a
set
of
courses
to
learn
this?
Where
can
they
go
if
we
do
you're
absolutely
right?
Well,
safe
code
and
oasp
have
a
lot
of
very
specific
individual
narrow
courses,
but
first
of
all,
I
think
we
do
that.
I
It's
going
to
be
a
huge
long
list,
incredible
amount
of
work
and
I.
Don't
think
that
we
need
that,
for
this
we're
just
trying
to
figure
out
hey
if
you
want
to
learn
a
a
large
sweep
of
material.
Where
can
you
go
and
if
they
deliver
a
large
number
of
atomic
things,
but
you
can
approach
it
as
a
single
unit.
I
I
think
that's
fine,
but
we're
not
I,
don't
think
we're
trying
to
I
mean
all
of
these
can
I'm
sure
be
looked
at
and
broken
down
into
different
pieces,
so
I
would
start
by
listing
them
as
a
single
and
if
that's
too
gross
Grant,
if
that's
not
granular
enough,
we
can
go
back.
At
least
we'll
have
a
place
to
start.
B
B
I
E
H
A
A
For
example,
I
talked
with
the
Intel
secure,
open
source
development,
Center
of
Excellence
tomorrow
and
I'm,
going
to
potentially
try
to
get
them
to
donate
and
contribute
material.
So
that
could
be
something
that
you
know.
Some
companies
may
allow
us
wholesale
to
say,
go
ahead
and
reuse
republish
others
who
might
just
need
might
have
it
as
reference.
We
need
to
make
our
own
potentially
so.
B
A
B
You
know,
but
like
the
Lexicon
and
like
like
being
able
to
like
integrate
that
in
and
like
make
connections
with
like
sections
of
David's
course,
because
David's
course
is
being
broken
up.
Atomically,
that's
only
going
to
be
available
for
the
coerces
that
are
openly
available
and,
like
you
know
what
I
mean
yep.
I
L
I
asked
this
question
in
chat,
but
is
it-
and
you
may
have
said
this
already
I
apologize,
but
is
the
goal
of
the
librarian
will
vet
what
these
things
are?
Because
you
know
our
conversation
on
course
in
class,
you
know
to
various
providers
is
going
to
be
different,
like
sometimes
the
course
is
like
literally
something
with
materials
where
you
test
out
of
it
and
go,
and
sometimes
people
it'll
just
be,
of
course,
is
just
like
a
guide
right.
L
C
C
C
Yeah,
let
me
also
see
if
I
can
share
my
screen.
You
should
be
able
to
see
it
now.
I
guess!
Yes,
all
right,
so
we
went
actually
over
the
different
items.
We
copied
the
structure,
it's
still
a
bit
of
a
hot
mess
because
yeah
for
reasons,
but
actually
when
we
were
going
more
in
depth,
we
actually
thought
okay,
a
couple
of
the
items
actually
in
there,
the
goals
and
let
me
go
over
the
ones
that
actually
are
like
this
one.
C
The
2.5
member
organization
also
contribute
existing
internal
sector
training
materials.
Well,
the
first
stream
is
all
about
curating
and
creating
content
and
materials
right.
So
we
thought
like
yeah
some.
Should
this
not
be
moved
to
to
stream
one?
Does
it
make
sense?
I
mean
it's
not
a
big
goal
here
in
this
case,
but
still
it
does
make
a
lot
of
sense
to
actually
put
that
in
there
curating
stream.
C
E
A
B
A
B
So
let
me
ask
you
this
so
like
when
we
when
I
say
things
like
I
automate
like
David,
Wheeler's,
repo
or
course
and
like
repo
to
check
into
the
to
the
graph
should
I
but
I
know
that
also
needs
to
be
done
with
all
every
other
course.
So
should
I
list
them
all
out
or
can
I
just
make
that
one
line
item
like.
B
Well,
if
you
actually
look
at
this,
we're
actually
proposing
basically
doing
date,
focusing
on
the
date
on
David's
course
and
the
asvs
and
wstg
because
Glenn,
if
you
scroll
up
so
we
already
have
a
large
part
of
that
covered,
but
we're
missing,
like
180
Labs,
currently
to
have
full
coverage
with
the
asvs
and
wstg.
And
then
we
wanted
to
add
the
five
languages
that
we
talked
about
and
you're
talking
about
like
it's
a
massive
amount
of
work
like
it
right
over
there
yeah.
A
B
C
A
C
Yeah,
so
we
have
2.5,
then
2.6,
actually
some
of
the
things
here
that
could
fall
in
stream
two,
but
also
yeah.
We
see
that
some
of
the
things
actually
could
be
stream
one
and
three,
so
we
thought
of
maybe
splitting
this
one
up
the
2.6
go
because
sponsor
existing
or
creating
ultimate
delivery
streams
for
Education
content.
So
it's
about
podcasts
as
well
Randall.
You
also
mentioned
that.
A
So
the
idea
for
stream
one
is
that
that
is
a
body
of
things
that
exist,
so
David's
class
is
already
done.
It's
already
in
edx
and
scorm
connect
and
the
LF
training
repo.
If
we
wanted
to
make
a
boot
camp
out
of
that,
that
would
be
I
would
feel
kind
of.
There
would
be
like
a
new
alternate
delivery
stream,
so
that's
kind
of
new
work,
because
that's
not
done
yet
and
there
would
need
to
be
some
effort
on
that.
So
that's
why
and
stream
two
was
kind
of
new
stuff
and.
K
A
Like
you've
identified
a
bunch
of
gaps,
so
I
would
be
okay,
leaving
it
here,
just
because
it
that's
how
I
ordered
things
in
my
head.
But
again,
if
we
have
strong
feelings
that
you
know,
David
already
wrote
a
conference
boot
camp
based
off
of
his
class
and
we
just
need
to
deliver
it.
Then
we
could
push
that
to
stream
one
very
easily
yeah.
C
C
Okay,
okay,
but
because
then
that
could
also
be
indeed
that's
also
not
really
an
issue,
but
I'm
just
thinking
out
loud
that
basically,
the
librarian
needs
to
have
a
lot
of
I
mean
it
needs
to
be
like
a
clone
of
David
or
myself
or
I
mean
otherwise.
You
know
it's
going
to
be
pretty
hard
actually
to
do
it
in
in
our
stream
too.
Right.
I
A
I
In
the
longer
term,
I'm
sorry
go
ahead,
I
think,
in
the
end,
what
we
need
to
do
is
identify
a
specific.
Here
is
what
we
need,
content
you
know
and
and
into
chunks
that
we
can
then
go
and
say:
hey.
We
will
fund
people
to
do
X,
Y
and
Z
unless
it
all
exists,
which
is
the
point
of
stream.
One
is
yes,
we
try
to
break
sure.
First
of
all,
we're
not
just
duplicating
what's
already
out
there
yeah.
A
H
A
Already
have
identified
that
you
already
have
the
beginning
of
the
work,
but
eventually
you
know
stream.
One
will
start
to
be
opinionated
saying
we
have
a
lot
of
requests
for
x
or
y
training
and
we
have
some
content.
We
need
to
do
a
podcast
or
we
need
to
have
a
class
on
this
and
then
eventually
the
sections
will
kind
of
blend
back
into
one
thing
like
we
are
here
today:
okay,.
A
C
H
C
F
A
Overwhelmed
by
that
just
again
just
get
us
the
list
and
get
us
the
cost
estimate
of
what
you
think
it
is
and
then
we'll
worry
about
finding
people.
So,
like
the
podcast,
that's
something
that
you
know
I'm
gonna
volunteer
and
try
to
collect
people
to
do.
We
also
have
the
best
practices
working
group.
We
can
lean
into
help
for
making
content
or
things.
So
we
have
a
lot
of
folks
we
can
lean
into,
but
right
now,
I
just
need
to
have
that
kind
of
an
initial
scope
and
a
cost.
C
Yeah
yeah,
okay,
clear,
and
so
as
far
as
us
in
stream,
one
it's
really
about
finding
and
curating
the
materials
and
stream.
Two
is
also
about
creating
gaps,
materials
for
gaps
that
are
identified,
push
back
to
those
projects
in
their
open
data
set.
So
we
can
easily
have
the
whole
machine
running
and
updateable
and
all
that
good
stuff.
All
right.
B
B
B
So
that
way
you
could
you
know
it
would
be
an
easy
way
for
people
to
just
pull
from
the
API.
They
could
pull
all
their
content,
and
you
know
they
could
also
like
pull
groups
of
contents,
because
it
is
a
graph
database,
but
that's
also
why
we
kind
of
discussed
this
before
one
of
the
things
that
we
wanted
to
do
was
move
like
the
librarian
over,
because
the
librarian
does
need
to
know
a
bit
about
how
graph
databases
are.
A
Structured
don't
so.
The
three
sections
are
an
artificial
construct
to
help
us
divide,
delegate
and
accelerate
our
work
on
the
plan.
The
Sig
is
will
be
responsible
for
all
this
work.
So,
even
though,
like
today,
your
stream,
two
you're
helping
work
on
stream
two
once
we
publish
the
play,
we
give
the
plan
up
that
stream.
Two's
gone.
It's
just.
You
know,
we'll
have
a
bunch
of
issues
to
start
working
through
that
you
you'll
grab
and
if
there's
a
team
of
SKF
developers
that
are
appropriate
to
work
on
things.
A
You
know
those
issues
would
get
fobbed
over
there
to
their
queue,
whereas
you
know
like
of
speaking
at
conferences,
maybe
you
know
we
have
people
that
want
to
volunteer
that
want
to
go
speak
at
conferences
for
that
type
of
stuff,
so
we'll
figure
out
the
distribution
of
work
later.
You
need
to
plan
done
all.
A
I
Yeah
so
I
think
I
think
we
need
to
focus
for
expand
training,
it's
hey.
What's
the
goal
is
to
just
identify,
what's
missing,
not
to
build
it
before
before,
creating
the
plan
right
now,
we're
just
we're
creating
a
plan,
and
it
doesn't
always
have
to
be
any
particular
approach.
We
just
need
to
identify
it.
I
I
just
want
to
make
sure
it's
in
the
outputs
that
it's
clear
enough
to
you
know,
what's
just
a
mention
versus,
what's
really
drilled
down
into
so,
for
example,
unsurprisingly,
a
survey
course
like
the
fundamentals
course
I
mean
there's
a
section
specifically
on
threat.
Modeling
I
mean
it,
you
know,
goes
through
some,
some
Basics
and
that
sort
of
thing.
I
So,
if
you
want
them
more
in
depth,
you
need
to
say
hey
more
in
depth,
maybe
some
idea
of
the
content
or
how
long
or
something
to
indicate
that
this
is
not
just
a
section
of
a
work
but
something
deeper
yeah.
You
know
you
don't
have
to
say
everything.
That's
in
there,
of
course,
just
you
know
an
idea
of
how
much
more
are
you
expecting
and.
A
A
That's
that
that
this
is
going
to
be
very
iterative
or
how
we're
going
to
approach.
This
is
yes,
we
have
some
threat,
modeling
stuff.
We
might
get
feedback
from
Learners.
This
was
interesting,
I'd
like
to
know
more
and
that's
where
we
might
spin
off
an
additional
whether
we
augment
that
module
or
we
spin
up
an
additional
kind
of
intermediate
or
Advanced
module
on
that
particular
topic.
But
that's
you
know
future
work,
let's
understand
what
exists
and
then
we'll
actually
go
out
and
talk
to
real
Learners
and
see
what
they
would
like.
F
B
F
A
C
Well,
so,
for
this
one
develop
in-person
education
that
we
had
also
well,
let's
not
stream,
one
anymore
stream-
two,
because
we
also
will
create
materials.
So
that
clears
a
lot
up.
The
other
thing
we
were
actually
discussing
that
would
make
more
sense
actually
to
make
this
a
year
two
goal,
because
we
have
done
experience
with
what
type
of
material
how
easily
it
was,
etc,
etc.
C
What
we
have
and
then,
as
a
year
two
goal,
actually
developed,
yeah
the
training
for
boot
camps
and
luckily
for
yep
all
right
perfect,
and
then
we
had
2.8
partnership
with
indeserved
communities
and
Alternative
Learning
paths.
Yes,
we
thought
this
would
better
belong
to
stream,
one
actually
to
do
this
yeah
with
the
content.
That's.
A
C
No
I
will
I
will
make
a
PR
because
also
I
saw
in
the
and
similar
for
this
one
by
the
way,
I
think,
then,
we
are
through
the
whole
list
that
I
actually
want
to
discuss
partnership
with
traditional
education
bodies,
I
mean
stream.
Three
is
really
into
the
incentives
and
building
those
relations,
so
we
thought
maybe
that
one
would
fit
better
there
and
yeah
also
for
the
one
actually
indeed,
I
saw
there's
still
some
old
sections
as
well
like
this
section.
A
C
L
A
A
B
H
C
A
B
A
C
C
C
A
B
Remember
we
talked
about
how
like,
at
the
end
of
the
day,
only
David,
and
you
are
pretty
much
the
only
people
that
know
how
to
like,
could
break
down
the
whole
scope,
because
eventually,
there's
going
to
be
oh,
so
one
of
the
concerns
we
had
just
to
make
it
clear
right
now.
Currently,
we
don't
have
overlap
in
in
our
in
our
database,
so
we
start
checking
in
all
this
content.
H
B
A
So
there
will
be
a
PR,
for
you
know,
hire
the
librarian
and
we'll
need
to
create
that
job
description.
So
I
would
welcome
your
feedback
on
some
additional
skills.
We
would
like
to
have
that
person
to
have
if
you
need
to
have
them
to
have
some
ability
for
database
management
or
SQL
things
and
we'll
get
those
added
in
as
asks
for
the
job
description.
B
Is
well
I
think
that's
what
I'm
saying
I
think
that
that's
what
we
would
want
to
do
at
FK,
SKF
Ops
is
to
make
sure
that
database.
The
database
doesn't
take
like
45
minutes
to
complete
a
query.
Yeah
yeah,
because
that's
the
thing
about
graph
databases
is
that
if
you
start
going
like
overlapping
stuff-
and
it
starts
to
get
too
crazy,
it
can
get
real
slow.
A
A
B
Feedback
would
be
excellent.
We
are
integrating
algoria
search
so
that
we
could
have
very
cool
search
functions,
so
you
could
do
crazy
stuff
with
your
search,
but
that's
just
because
we
have
time
to
kill,
but
but
yeah,
but
like
we
would
like
feedback,
I
think
on
the
directory
structure.
What
people
think
I
kind
of
proposed
something
which
is
kind
of
what
me
and
Abhishek
gronked
out
here
so
yeah.
We
would
definitely
appreciate
feedback,
I,
think
I,
don't
know
if
abishay
has
anything
to
add
you.
E
Know
maybe
specifically
feedback
around
the
the
actual
classification
of
the
of
the
definitions
as
they
are
in
the
pr
now
and
one
more
discussion,
interesting
discussion,
which
Randall,
Jeff
and
I
are
having
on
the
pull
request,
is
around
adding
material
from
from
organizations.
For
instance,
our
discussion
is
around
the
sneak
definition
for
cve
and
the
question
came
up.
Should
we
use
like
organizational
non-open
organization
definitions
in
this
glossary
or
if,
if
we
can
avoid
it,
should
we.
A
C
C
L
Yes,
yeah,
there's
there's
Direct
Value
on
these,
just
to
highlight
sort
of
from
my
comment
on
the
on
the
pr
and
not
that
anyone's
trying
to
do
that.
It's
not
saying
that,
but
you
know
I'm
a
center
type,
so
we
could
do
it
too
and
like
say,
there's
Linux
is
in
there
we
could
put
a
billion
of
them,
but
you
know
a
property
like
open.
Ssf
has
pretty
good
SEO
and
will
over
time
that
will
get
better
because
of
everything.
L
B
L
We
can
look
at
things
like
you
know.
What
are
SEO
results
today
for
other
things
that
we
put
in
CBE.
What
comes
back
in
those
results,
if
someone's
ranking
High,
we
can
in
the
case
of
the
sneak
definition,
it
wasn't
even
on
the
first
page
of
Google
results,
you
know,
I
think
Linux
is
actually
the
top
the
red
hat.
It's
actually
the
top
definition
for
CBE
it
outranks
the
CV
site,
but.
C
B
I
had
I
had
proposed,
maybe
putting
in
like
a
simple
voting
system.
One
thing
I
also
want
to
point
out,
is
I
think
that
different
definitions
are
defined
from
different
points
of
view.
So
I
think
that,
like
I,
don't
think
that
they're
necessarily
ones
better
than
the
other,
sometimes
I
think
that
they're
just
coming
at
it
from
different
points
of
view,
so
kind
of
what
I
was
imagining
and
what
we
have
set
up
is
that
if
you
put
cve,
it's
gonna
pull
back
every
single
CBE
definition.
I
I
I
won't
push
back
just
a
little
bit.
I
I
do
think
that
some
definitions
are
better
than
others.
I
I
do
get
the
point
that
maybe
we
should
try
to
avoid
linking
to
specific
vendors.
If
we
can
I
mean
unless
I'm
sure
we
can
find
exceptions,
but
I
generally
prefer
either
government
sites,
because
usually
they
already
have
to
deal
with
the
winding
the
way
through
different
parties,
and
oddly
enough
Wikipedia
is
often
a
pretty
good
source
of
definitions,
because
if
you
want
to
watch
and
edit
War
watch.
D
I
So
you
know
it
doesn't
always
make
it
the
best,
but
those
are
are
two
actually
often
decent
sources
for
definitions
that
deal
with
the
problems
that
you
just
mentioned,
because
it's
not
just
hey,
we
I
actually
don't
mind
pointing
occasionally
to
you
know,
hey
vendors,
doing
something
great
I'm
glad
when
inventors
do
good.
It's
it's
it's
awesome,
but
they
obviously
have
their
particular
perspective
and
I.
Think
that's
the
real
issue,
I,
don't
mind,
giving
somebody
a
little
SEO,
but
I
would
want
to
make
sure
that
we
see
all
perspectives.
B
I
D
D
Yeah
people,
often
when
people
in
I've
found
in
this
forum
or
in
this
in
openssf,
talk
about
government.
They
love
to
talk
about
government
and
the
executive
order
and
they
don't
even
say,
executive
order.
They
say
EO
or
whatever
you
know,
there's
just
a
lot
of
very
U.S
government,
specific
linga
flying
around
in
in
open
ssf
and
just
just
keep
you
know
as
an
expat
myself,
somebody
from
the
US
who
lives
in
the
UK
I
pick
up
on
this.
This
is
a
this
is
a.
What
do
you
call
it?
G
Yeah
thanks
yeah
and
just
kind
of
researching
what
Dan
Wilson
said.
You
know
you
know
I'm
from
the
UK
but
kind
of
what
we
use
a
lot
in
the
UK.
Is
the
nist
recommendations
a
lot
of
the
time,
so
maybe
that's
a
good,
authoritative
source
to
kind
of
recommend
for
a
lot
of
definitions.
It's
just
it's
the
one
I've
used
in
my
kind
of
cyber
security
training.
It's
it's
pretty
robust,
they're,
pretty
vendor
neutral.
You
know
and
that's
it
I
think
yeah
we're
getting
reiterating
where
everyone
else
said.
G
A
Agreed
yeah,
thank
you.
For
that
perspective,
yeah
nist
is
a
amazing
resource
and
Nisa
has
good
resources.
Every
locality
has
some
something
some
value
to
add.
So,
let's
not
be
I'm
exclusively
focused
on
one
area,
but
we
again,
we
know
that
nist
has
helped
standardize
a
lot
of
things
within
security
around
the
they're.
A
role
model
might
not
be
the
best
example
all
the
time,
but
there
definitely
uses
a
role
model.
A
So
thank
you.
Everybody
I
appreciate
your
time
and
attention
today.
If
you
have
any
additional
feedback,
you
want
to
continue
the
conversation,
do
that
in
slack
or
on
the
mailing
list,
we'll
see
everybody
in
two
weeks
or
at
a
sub
call
soon,
and
thank
you
for
all
the
amazing
work.
Looking
I'm
really
excited
to
see
this
develop
the
way
it
is.
Thank
you
all
and
have
a
great
day
see
you
next
time.