oss-sec mailing list archives

Re: Closed list


From: Josh Bressers <bressers () redhat com>
Date: Mon, 25 Apr 2011 10:22:18 -0400 (EDT)

----- Original Message -----
On Sun, Apr 24, 2011 at 03:30:29PM +0400, Solar Designer wrote:
Personally, I'd be happy to invite Apple, *BSD's, and Google security
folks to have a sit at the table. Since Google doesn't release a Linux
distro for others to use, ...

Oh, I was too quick to say that. Android, Chromium OS, and Chrome OS
_might_ qualify once we lift the "was a vendor-sec member" requirement.

These are very different from typical Linux distros, which is why it did
not occur to me to consider them in this context.


We included Mozilla in vendor-sec due to them being a large distributor of
open source software. Google certainly fits into this category these days
with things like Andriod and Chrome (both browser and OS).

I've been contacted by some Andriod folks in the past. They're keen to
start doing public advisories, most other Google projects already do this.

I suspect the real problem we'll hit with someone like Google is who to
subscribe. We could easily end up with hundreds of requests from a company
that size.

Thanks.

-- 
    JB


Current thread: