Full Disclosure mailing list archives
Re: [Security] [vendor-sec] Re: Re: Vulnerability Disclosure Debate
From: Seth Arnold <sarnold () wirex com>
Date: Mon, 11 Aug 2003 12:23:00 -0700
On Sat, Aug 09, 2003 at 12:49:25PM +0300, Georgi Guninski wrote:
Steven M. Christey wrote:Whether open source organizations are a formal part of OIS or not, at least some of them are advocating some form of "responsible"
For my own part, I -really- like rain.forest.puppy's RFPolicy; it is very simple to understand for everyone involved, and it seems to work better than just throwing bug information into the wind. The only way anyone is going to take part in "responsible disclosure" is if it is (a) easy (b) gives credit where credit is due. I think RFPolicy goes a long way towards satisfying both points, but has the downside that it is not "blessed" by a formal organization, thus many large companies aren't likely to promote it. I think people generally -want- to do The Right Thing, but reading more than a page to figure out what the right thing -is- is likely to be a disincentive towards doing the right thing. -- "Dependence on computers is apparently making a significant fraction of the population incurably stupid." -- Fritz Whittington
Attachment:
_bin
Description:
Current thread:
- Re: Vulnerability Disclosure Debate, (continued)
- Re: Vulnerability Disclosure Debate Aron Nimzovitch (Aug 08)
- Message not available
- Re: Vulnerability Disclosure Debate Aron Nimzovitch (Aug 08)
- Re: Vulnerability Disclosure Debate Joel R. Helgeson (Aug 07)
- Re: Vulnerability Disclosure Debate gridrun (Aug 08)
- Re: Vulnerability Disclosure Debate Matthew Murphy (Aug 07)
- Re: Vulnerability Disclosure Debate Matthew Murphy (Aug 07)
- Re: Vulnerability Disclosure Debate dhtml (Aug 08)
- Re: Vulnerability Disclosure Debate mattmurphy () kc rr com (Aug 08)
- Re: Vulnerability Disclosure Debate Steven M. Christey (Aug 08)
- Re: Re: Vulnerability Disclosure Debate Georgi Guninski (Aug 09)
- Re: [Security] [vendor-sec] Re: Re: Vulnerability Disclosure Debate Seth Arnold (Aug 11)
- Re: Re: Vulnerability Disclosure Debate Georgi Guninski (Aug 09)