Hacker News Reader

It will be interesting to see which providers didn't get the embargoed release.

So if you get a reboot announcment from your xen vps provider after today 12:00Z, you should list them here.

Pre-disclosure list is at the bottom of this page.. http://www.xenproject.org/security-policy.html

Huh, I have a tiny machine at one of those smaller places, and they are on the list. Good to know the smaller players can build up a reputation for embargoing, too.

They spell out the requirements for getting on the list - one of the valid ways to qualify is basically just being a webhost that uses Xen.

Interesting that over half of the companies on the list were added within the last week, if the dates in the page changelog accurately reflect when they were added. If so, perhaps they all suddenly bundled in so they could find out what the embargoed vuln. was.

Reply on news.ycombinator.com