Security Team Chat channels (IRC and Slack)

Historically the security team used the IRC channel #drupal-security on freenode. With the general, broader move of the Drupal community to slack, the security team has also moved to slack. The irc channel is still maintained as a backup and general alternative in case there are issues with slack.

Using Slack - the primary location for discussions

First, get yourself connected to the general Drupal community Slack. You must set up two-factor-authentication to Slack to help ensure your account is not compromised. After that is done, contact @mlhess in Slack and he can add you to the channel.

Slack maintains history, so anyone invited to the channel can see that history. In the past people would periodically be invited to the channel to discuss issues and then removed from the channel. If it's necessary to collaborate with people in a private room in slack, you should create a new private room for those people.

Using irc - a backup alternative if necessary

Everyone on the security team has been granted access to join the restricted #drupal-security channel on freenode IRC.

You must be registered before you can be given access to the channel. If you login with a password, you are registered. If not, do a “/msg nickserv help” to find how to register yourself.

Joining the channel yourself

/msg chanserv invite #drupal-security

Auto-joining the channel every time you log on to IRC

The procedure is different for different IRC clients:

• Pidgin: Use the instructions here as a guide (in particular, add the "chanserv" bot as a buddy, and then set up a buddy pounce to message it with "invite #drupal-security" every time it logs in).

Inviting a reporter/maintainer temporarily

If someone wants to join the channel to discuss an issue they are about to report or to discuss a proposed fix or details of their release they can be invited to join the #drupal-security room temporarily. This lets them talk with multiple team members at the same time.

Become op:
/msg ChanServ OP #drupal-security

Then, while in the channel:
/invite username #drupal-security

You can then ask them to leave or kick them:
/kick username Thanks for your help
(If you don't include the thanks the default is sent: Your behavior is not conducive to the desired environment.)

Granting access to a new security team member

To grant:
/msg chanserv flags #drupal-security [nick] +iA

To revoke:
/msg chanserv flags #drupal-security [nick] -iA

Listing irc users with access to #drupal-security

/msg chanserv flags #drupal-security

SSL

#drupal-security channel requires SSL to connect.

enable SSL on Colloguy (osx)

1. Open connections window
2. Right click and click "Get Info"
3. Check SSL
4. Set port to 6697
5. Restart client to get new settings.

enable SSL for freenode on irssi

1. disconnect
2. /server add -ssl -network freenode chat.freenode.net 6697
3. reconnect