Full Disclosure mailing list archives
RE: [len () netsys com: pseudo-authoritative disclosure guidelines]
From: "Richard M. Smith" <rms () computerbytesman com>
Date: Thu, 5 Jun 2003 14:31:44 -0400
Hi, Regardless of what security researchers may do, I was wondering if the vendors which make up OIS are willing to lead by example by immediately practicing their proposed guidelines? If they walk the talk, there could be a bit more confidence that the OIS is not just in the business of issuing press releases. Richard M. Smith http://www.ComputerBytesMan.com -----Original Message----- From: full-disclosure-admin () lists netsys com [mailto:full-disclosure-admin () lists netsys com] On Behalf Of Len Rose Sent: Thursday, June 05, 2003 1:19 PM To: full-disclosure () lists netsys com Subject: [Full-disclosure] [len () netsys com: pseudo-authoritative disclosure guidelines] This is in reference to: http://news.com.com/2100-1002_3-1013423.html ----- Forwarded message from Len Rose <len () netsys com> ----- Date: Thu, 5 Jun 2003 13:13:48 -0400 From: Len Rose <len () netsys com> To: rob.lemos () cnet com Subject: pseudo-authoritative disclosure guidelines Message-ID: <20030605171348.GC5519 () netsys com> The OIS is meaningless and will have zero impact on full disclosure practices. I'm surprised you're lending any credence whatsoever to this pie in the sky dream of controlling disclosure. As long as one independent researcher doesn't agree with these guidelines it's all meaningless hype and blather. Additionally, none of the members are very well-respected by the security community and I predict that like all the other so-called "full disclosure" guidelines will be totally ignored. I understand CNET's desire to keep headlines on their web site but it's just another flash in the pan press release. Len ----- End forwarded message ----- _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- [len () netsys com: pseudo-authoritative disclosure guidelines] Len Rose (Jun 05)
- RE: [len () netsys com: pseudo-authoritative disclosure guidelines] Richard M. Smith (Jun 05)