Notices by James Tucker (raggi@don.rag.pub)

@womble I mean I’d like to know that, but the thing I would love to know even more is: exposed where? There’s a huge difference between “we logged it to our s3 logs bucket” and “we committed it to a public git repo” and where on this gradient it is really matters to me as a user

In case you missed it, grafana leaked their package signing key AND the passphrase. This has not been loud enough: https://grafana.com/blog/2023/08/24/grafana-security-update-gpg-signing-key-rotation/

@nova lmk if i can help

@nova we need a new kind of vc fund that provides a medium scale slush loans for not-for-profit companies to perform scalable activities