OpenSSF SIRT Best Practices WG, 28 Mar 2023

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: BEST Working Group’s SCM Guide collaboration (March 23, 2023)

Description

Meeting notes: https://docs.google.com/document/d/1ttqkcYPmYZyqvtkaHs92bx2UeVUiXDhuzP-0WbP11Fw/edit#heading=h.7o2ubzl5z39r

A

All right, hello,.

B

Is it just two of us? Are we expecting more.

A

Yeah we are expecting. The group leads I guess.

C

What hey I'm, I'm I'm on a call?

C

Sorry I'm, not muted, not bad.

C

I would have sworn that Zoom joined you with a call Auto muted, but apparently it did not. For this particular case.

D

So can someone fill me in I was added in on this yesterday, I believe and SCM. What does this refer to.

A

D

A

Control Management, um so basically it's a guy that was started by a legit software. Okay,.

D

Sorry I just found your working group I thought I was in a completely different working group. um This is great. This is interesting, can't help or advise today, I'll be back all right, but.

A

uh Okay, usually, then, in the norm lead this group not sure they haven't checked in yet I'll ask maybe in Slack.

A

Okay, Rob I just asked uh in the group slack if uh known and then who usually lead this group are joining today.

B

B

I guess we'll.

D

B

A few more minutes and see if either of those folks show up.

A

At school it was a seven minutes if the teacher doesn't come.

C

D

C

Crow, you can you, you run so many meetings as it is. You can just you, can just make it up and run this one too, like I I, have faith in your your skills and Agility.

B

Man, I gotta, get this blog done and then I have to go talk to sisa at the top of the hour.

C

B

C

Fun you clearly, you clearly don't have enough tasks on your plate. Can we add some more just to make your life more interesting.

B

This will be great: it's all about uh government, open source and operational technology, so like critical infrastructure, stuff.

C

Have you learned to juggle too, while you're at it I.

B

Mean I need to in.

C

The proverbial stance, or, in the literal sense, not really yeah,.

B

I only have one ball on my desk: I can just throw that up and down I guess, that's close enough.

C

Yeah, hey I'm gonna, be wearing my uh my Doctor Who hat I'm, going to PAX East. So uh that's you know, giant giant, nerd, gamer gamercon, so you know love it great great opportunity to wear the hat. I've.

B

Heard that's a good show. I've never had that chance to go myself.

C

It's are you on: where are you where's, Home where's Home generally, for you I know it's a recorded call.

B

Beautiful Columbus Ohio home of the origins, game, fair.

C

Okay, so you're closer to Pax West, then right.

B

um Probably in Seattle 's like a five-hour plane ride.

C

Okay, right yeah, you should come. You come come, uh come to a come to a gaming convention. Sometimes it's a good. It's a good show. It helps that I'm in Boston. So it's like you know a drive but yeah.

B

Yeah well I. We participated in Origins for like uh 20 years running games.

C

You seemed like you would have been, have you been a dungeon master?

C

B

C

The kind of person yeah you seem to be have the personality of someone that would have been a dungeon mastered, am.

B

I, currently, yes have been 30 years, I.

C

Think I think I would really enjoy having you as a DM I.

B

C

B

Feel I feel like.

C

Yeah, if you ever want to do a One-Shot at like a conference event in an evening like I, would be down to participate.

B

Right now, I'm running this root.

C

Very fun role play so it's not a DND or is it a d d game system? It.

B

Is a a hippie game? It's uh based off of something called The Apocalypse engine, okay,.

C

B

uh More storytelling than a traditional DNA.

C

B

Yeah I've DND I got into d d by my cousin, like when I was 11 years old and have never stopped.

C

Very fun I am I was I was last uh about two years ago. No year and a half ago dming my first campaign, one shot with friends. I was doing Forge of Fury as a as a starter. So it was the it's from the same book that the tomb of Horrors got ported to 5e from um yeah, but I was using some variant roles that some redditors came up with, that made it less Hack and Slash and could include some more like social elements. So yeah.

B

Yeah, but uh you know I've run and written uh role-playing in board games for years. Fine, it.

C

Seems like it seems like you're you're, a cup of tea too or I, don't know where Pax unplugged is I, don't know, yeah.

B

All right, well, I, guess we can adjourn this call. Unless you want to talk about d d, we.

C

Could run a camp well one hour campaign right here right now, Pro go.

B

A

B

Could actually I have a whole set stack of stuff over there if.

C

You ever want to really zany me one shot um just because you're like you need a thing. um uh Honey Heist is a lot of fun as a as just just doing a honey Heist.

C

um There's some there's rules, and you just you roll the scenario and it the rules are very simple like you. Basically, if you each player is a bear and they're trying to steal, tell me more yeah right and if the Bears are rolling they're they're, if they can either do things that are criminal, Acts or bear acts, and if they do things that are too criminal, they can end up going. Oh, you act, wait what doesn't kill you makes you stronger.

B

C

So if you, if you go too far towards bear, you end up going completely feral and you know you become a bear and if you go too criminal, you end up taking. You know you end up uh uh becoming too much of a criminal and you end up, uh you know, betraying the party and you know so you each player is trying to play this role of like trying to not become too much of a criminal and not trying to become too much of a bear, and then uh yeah. But it's like this.

C

The rule sets are like very simple: it's like you, have one stat how bare or criminal you are and that's that's, that's it and then you just role play on that. It's great! It's a really yeah, so the rules are really simple: I'll see if I can track them down and find them. If you can't find them yourself, yeah.

B

I'll Google around and see what I can do.

C

B

I'm gonna get ready for packs, have fun all right.

C

B

Good day, everybody sorry, uh we couldn't talk about source code management.

D

C

Have a good day bye, guys just.