)]}'
{"security-notes/OSSN-0028":[{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"3414e30f4513339dc14f1f8d094998b50b382333","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Nova leaks hypervisor host SMBIOS serial number to guests"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"baa201ad_6cee86ee","line":1,"updated":"2014-09-29 20:20:53.000000000","message":"Would OpenStack parlance dictate we refer to the \u0027hypervisor host\u0027 as a \u0027compute host\u0027 ?","commit_id":"0df714de186f18a9493d71376304aba0ec37b817"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"190bc019fd4d0a7a491e7cf9908aaffc999f5ba1","unresolved":false,"context_lines":[{"line_number":1,"context_line":"Nova leaks hypervisor host SMBIOS serial number to guests"},{"line_number":2,"context_line":"---"},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"### Summary ###"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"baa201ad_df2b922e","line":1,"in_reply_to":"baa201ad_6cee86ee","updated":"2014-09-29 20:28:46.000000000","message":"Yes, we could call it \"compute host\" here.","commit_id":"0df714de186f18a9493d71376304aba0ec37b817"},{"author":{"_account_id":7063,"name":"Robert Clark","email":"hyakuhei@gmail.com","username":"hyakuhei"},"change_message_id":"3414e30f4513339dc14f1f8d094998b50b382333","unresolved":false,"context_lines":[{"line_number":22,"context_line":""},{"line_number":23,"context_line":"The exposed host UUID could theoretically be leveraged by a cloud user"},{"line_number":24,"context_line":"to get an approximate count of the number of unique hosts available to"},{"line_number":25,"context_line":"them in the cloud by launching many short lived VMs."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"### Recommended Actions ###"},{"line_number":28,"context_line":"It is possible to override the use of the compute node\u0027s SMBIOS data by"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"baa201ad_df5c7228","line":25,"updated":"2014-09-29 20:20:53.000000000","message":"On the face of it, this doesn\u0027t sound that bad - working out how many compute nodes exist is possible but most deployers probably quota VM deployment anyway so \u0027spraying\u0027 VMs to detect wont be a big deal.\n\nWas there concern around this information being used to infer more? Such as configurations etc?","commit_id":"0df714de186f18a9493d71376304aba0ec37b817"},{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"190bc019fd4d0a7a491e7cf9908aaffc999f5ba1","unresolved":false,"context_lines":[{"line_number":22,"context_line":""},{"line_number":23,"context_line":"The exposed host UUID could theoretically be leveraged by a cloud user"},{"line_number":24,"context_line":"to get an approximate count of the number of unique hosts available to"},{"line_number":25,"context_line":"them in the cloud by launching many short lived VMs."},{"line_number":26,"context_line":""},{"line_number":27,"context_line":"### Recommended Actions ###"},{"line_number":28,"context_line":"It is possible to override the use of the compute node\u0027s SMBIOS data by"}],"source_content_type":"application/octet-stream","patch_set":1,"id":"baa201ad_3f6c9e9c","line":25,"in_reply_to":"baa201ad_df5c7228","updated":"2014-09-29 20:28:46.000000000","message":"I agree that it doesn\u0027t seem like it\u0027s really that bad.  The initial bug reporter was concerned about this exposing information that isn\u0027t intended to be exposed.  I think that it\u0027s worth mentioning here in case somebody is paranoid about exposing an identifier for their individual compute nodes.  We leave it in the deployer\u0027s hands to decide what should be exposed.","commit_id":"0df714de186f18a9493d71376304aba0ec37b817"}]}