Re: Heroku early upgrade is raising serious questions

* Jonathan S. Katz (jonathan(dot)katz(at)excoventures(dot)com) wrote:
> +1 - with a more outside perspective on the overall issue, I do have to say that I'm okay to any entity operating "critical infrastructure" or the like having access to a critical security patch before the source is made available. I think to reiterate what JD said, we should just communicate that better in the future.

Having some kind of documentation / policy regarding who can get access,
or what they have to do to get access, would certainly help address
these concerns.

For my 2c, I really don't feel this went very well and I absolutely
think that it's a black-eye that the common impression is that we gave
the fix to Heroku ahead of the public release.

Not sure what the best place to discuss this is, but, basically, I think
we can do better.

Thanks,

Stephen