►
Description
Meeting notes: https://docs.google.com/document/d/1ttqkcYPmYZyqvtkaHs92bx2UeVUiXDhuzP-0WbP11Fw/edit#heading=h.7o2ubzl5z39r
B
A
A
Do
we
have
any
one
here
that
is
interested
in
helping
us
take
notes
today.
A
I
have
just
posted
the
link
into
the
zoom
chat
if
you
got
it
yeah
all
right.
Thank
you
appreciate
Dan.
Do
we
have
any
new
friends
at
this
their
first
time
with
this
group
today,
and
they
wanted
to
introduce
themselves.
C
I
can
introduce
myself
hi
I'm
Caroline
I
have
been
involved
in
scorecard
a
little
bit,
and
so
I
saw
this
as
a
related
working
group.
So
thought
I'd
listen
in
and
see
what
conversations
are
being
had
here.
So
thanks
for
having
me
excellent.
A
And
regive
put
a
little
note
in
the
Zoom
chat,
doesn't
have
camera
or
mic,
but
he
gets
to
work
on
the
scorecard,
which
is
pretty
cool.
Well.
Welcome.
Welcome
glad
to
have
you
here.
A
All
right
did
we
have
any
new
items
we
wanted
to
discuss
today.
We
can
briefly
go
over
the
sub
projects
we
have
Mr.
Wheeler
was
very
busy
with
some
updates.
I
can
talk
to
Jay
and
Christine
about
the
Dei
Sig
I
can
give
you
a
brief
update
on
the
memory
safety
Sig
and
then
maybe
we
can
get
an
update
on
the
guides.
How
does
that
sound?
A
little
recap
today.
A
C
A
Well,
anyone
that's
been
a
long
time
at
tender,
or
this
group
will
have
heard
of
the
struggles
of
David
wheeler
battling
with
his
scorecard
rails,
six
upgrade,
and
it
looks
as
if
he
has
finally
finished
that
huzzah.
So
now
the
scorecard
is
on
a
more
modern
version
of
rails.
Yay,
he
think,
gives
a
big
shout
out
to
Andrew
fader
for
help
and
he's
in
the
process
of
flipping
the
crypto
system.
A
A
The
governance
committee
call
was
canceled
last
week
and
we
won't
have
another
meeting
until
next
week,
where
that'll
be
the
next
opportunity
to
talk
about
it,
so
hopefully
so
what
that
would
be.
What's
today,
the
25th
that
would
be
the
fourth
so
hopefully
by
May
9th.
We
might
have
some
more
information
to
share
about
education,
Sig.
A
D
Yeah
we
had
office
ads
last
week,
centered
around
off
Omega,
which
is
starting
up
a
mentorship
program,
so
Yesenia
who's
and
Jonathan,
who
are
both
leading
the
afraid,
Yesenia
kind
of
like
got
on
to
answer
any
questions
so
about
six
people
on
the
call.
But
it
was.
It
was
like
a
good
start
with
very
little
so
like
Outreach
yeah,
so
we're
hoping
to
start
doing
these
monthly.
A
D
D
And
the
other
thing
that
we
have
been
working
on
for
the
last
couple
of
months
was
just
getting
together
like
a
database
of
both
sort
of
the
I
focus
and
cyber
security
organization
and
we're
finally
able
to
put
that
list
up
and
hopefully
kind
of
like
start
populating
it
some
more.
D
So
those
are
kind
of
like
the
the
key
updates
and
I
guess
where
a
lot
of
us
are
going
to
be
hopefully
at
open
source
Summit
in
about
a
couple
of
weeks,
and
we
have
a
couple
of
lightning
talks
and
a
panel
and
potentially
dual
words
of
the
FedEx
sort
of
like
a
meet
and
greet
and
recruit
some.
Hopefully
new
people
to
come,
join
the
work.
A
Yeah
I
think
that
would
be
really
great,
we'll
figure
out
those
details
and
share
with
the
group.
Anyone
that's
there
and
Vancouver
welcome
to
join.
B
A
From
the
memory
safety
Sig,
things
are
going
pretty
well,
we
are
going
to
have
I
think
one
or
two
additional
contributors
show
up
our
next
call.
Next
week,
I
had
some
folks
from
IBM,
Reach,
Out,
and
so
ideally,
we'll
have
just
more
people
talking
about
memory
safety
and
the
next
step
for
that
group
is
to
start
to
edit
the
plan,
we've
kind
of
agreed
upon
some
principles
and
goals
of
the
group.
Now
we
just
need
to
much
like
we
did
with
the
education.
A
A
B
I
have
been
kind
of
like
out
of
touch
for
the
past
week
so
because
I've
been
doing
w3c
stuff
in
Japan,
which
you
know
poor
me
but
I,
don't
know
so
I,
don't
actually
I
haven't
nothing.
I,
don't
have
any
any
updates
to
report
Christine.
Maybe
you
have
something
yeah.
D
I
know
one
thing
that,
on
my
end,
that
we
were
working
on,
Daniel
had
put
together
kind
of
like
the
really
new
guide
and
we've
figured
out
that
we
kind
of
like
that
structure.
Now,
on
my
end,
it's
just
going
in
and
putting
up
a
PR
to
just
add
a
little
bit
more
front
matter,
more
descriptions
and
introduction
to
the
section
so
PR,
hopefully
coming
up
soon
on
that.
A
Do
we
I'll
just
get
your
opinion
from
you
too
and
David
if
you
have
an
opinion
as
well
up
about
how
far
along
are
we
with
that
project?
Are
we
25
of
the
way
50
of
the
way.
D
Think
from
the
last
discussion
that
we
were
talking
around
the
70
80
I
might
be
remembering
it
incorrectly,
but
one
of
the
things
that
we
had
hopefully
wanted
to
do
is
see
if
we
could
get
something
ready
so
that
we
could
talk
about
it
at
open
source
Summit
in
Vancouver,
but
we
and
then
we
wanted
to
kind
of
sync
up,
but
you
know
to
see
how
far
we
could
get.
But
I
don't
think
that
happened
during
that
week.
B
Yeah
I
think
I.
Think
part
of
the
answer
to
that
question
depends
on
how
much
can
be
done
automatically
to
create
to
spit
out
the
markdown
and
the
index
files
and
the
way
that
we've
kind
of
re-imagined
it
and
I
don't
think
we
have
the
information
from
the
legitify
folks
about
you
know
about
that.
Yet
so
that's
kind
of
the
unknown
factor.
A
Well,
I
I
think
this
will
be
a
pretty
great
artifact
once
it's
ready,
so
let
me
know
and
I'll
work
with
Jennifer.
Maybe
we
do
a
blog
or
a
press
release
on
it
if
we
can
get
it
done
by
the
summit,
that
would
be
amazing.
I
know
she
was
looking
for
material
to
talk
about,
but
if
not
I
don't
want
to
put
pressure
on
the
team.
I
know
we're
all
doing
the
best.
A
E
Yeah
I
I
would
love
to
see
it
ready
by
then
I.
Don't
think
it
that
it'll
be
really
ready
by
then
I
mean
that's
only
a
few
weeks
and
I
agree
and
there's
a
lot
of.
If
you
look
at
some
of
the
comparable,
we
there's
a
whole
bunch
of
other
documents
that
look
at
things
that
the
information
hasn't
flown
in.
Yet
it's
not
clear.
That's
it's!
E
A
E
A
E
Yeah
yeah,
please,
please
use
all
your
your
subtle,
persuasive
skills,
that'll
be
awesome.
Yeah.
D
Yeah
and
then
kind
of
related
to
that
there
is
a
talk
that
I'm
going
to
be
doing
in
Vancouver
related
to
GitHub
and
sem.
So
that
would
also
be
another
opportunity
to
plug
folks
helping
up.
A
Cool
and
did
Thomas
or
George
join.
A
We
also
have
another
best
practices:
guy
we're
working
on
the
C
and
C
plus
plus
compiler
hardening
options
guide.
That
is
also
coming
along
gotten,
some
great
collaboration
from
some
folks
at
Red,
Hats
Folks
at
Microsoft,
just
other
community
members,
so
I'm
excited
how
this
document's
going
I
think
this
is
probably
a
little
behind
it
started
afterwards,
but
I
think
it's
a
little
tracking
behind
the
SCM
guide.
So
I
am
certain.
A
A
E
Yeah,
real
quick,
the
best
practices
badge
and
the
security
fundamentals
course
Sig
I,
don't
know
if
you
talked
I
put
in
some
text,
but
I
haven't
I,
don't
know
if
you
guys
talked
about
it.
We.
E
Let's
see
here,
I
guess
you
know,
for
the
open,
SF,
best
practices
badge.
The
big
thing
is
that
update
from
rails
six
to
seven
we're
now
going
to
be
upgrading
the
encryption
system
to
use
that
and
for
the
security
fundamentals
course
we
are
going
to
be
adding
an
item.
E
At
least
I've
got
a
pull
request:
I'm
planned
to
I
plan
to
emerge
it
very
very
soon,
just
pointing
out
the
need
to
you
know
when
you're,
storing
passwords
or
using
what's
called
you
know,
kdf
that
there's
ways
you
need
to
configure
this
I'm
talking
about
things
like
pbkdf
and
argon2id
and
B,
Crypt
and
so
on,
and
this
was
inspired
both
by
problems
that
LastPass
had
as
well
as
some
recent
concerns
with
Luke's,
which
a
link
I
put
there.
E
So
it's
just
you
know,
add
a
sentence
but
I
think
it's
an
important
sentence.
D
E
I
guess
continuing
on
the
fundamentals
course,
if.
A
E
Have
more
stories
that
help
illustrate
important
points,
I'm
talking
about
real
life
events,
and
you
know
things
that
that
you
know
help
explain
some
of
these
things.
Those
would
be
awesome,
it's
very
it's
actually
more
challenging
than
you
might
expect
to
find
something.
That's
it's
important.
It
was
in
the
news.
It
very
clearly
illustrates
a
specific
issue.
We
don't
already
have
an
illustration
for,
but
I
think
it
really
helps
hone
the
point
in
about
hey.
This
isn't
just
some
theoretical
topic,
but
it
actually
affects
people.
A
A
All
right
well,
thank
you,
everyone
for
showing
up
today,
if
you
have
any
ideas
for
a
future
meeting,
don't
hesitate
to
drop
it
into
the
agenda
or
talk
about
it
in
our
slack
Channel
or
our
mailing
list,
and
we
will
talk
to
everyone
in
two
weeks,
if
not
sooner
enjoy
the
rest
of
your
days.