oss-sec mailing list archives

Re: (linux-)distros list use statistics


From: Kristian Fiskerstrand <k_f () gentoo org>
Date: Mon, 13 Nov 2017 20:13:05 +0100

On 11/13/2017 04:10 PM, Solar Designer wrote:
Hi,

I think it's time for Gentoo and/or Amazon to share with all of us
the statistics they should have collected so far as per:

http://oss-security.openwall.org/wiki/mailing-lists/distros#contributing-back

 "13. Keep track of per-report and per-issue handling and disclosure 
timelines (at least times of notification of the private list and of 
actual public disclosure), at regular intervals produce and share 
statistics (most notably, the average embargo duration) as well as
the raw data (except on issues that are still under embargo) by
posting to oss-security - primary: Gentoo, backup: Amazon"

Please do.

Hi,

As far as I'm aware I haven't gotten access to edit the wiki page for
publishing it. But the stats Gentoo has recorded are as follows (graph
attached);

Date                                    All
Number of reports                       24
Average embargo time (first public)     10.44
Average embargo time (oss-security)     10.63

This is based on the following monthly data:
2017-06 2017-07 2017-08 2017-09 2017-10
1       3       6       9       5
10.84   34.16   6.39    5.83    9.30
14.16   34.50   6.39    5.84    9.31

The wikified stats based on the generated DocuWiki output is available
in very basic style at the testing instance:

https://wiki.sumptuouscapital.com/doku.php?id=distros_stats

but this deserves a more fitting home (e.g the width isn't a problem on
the wider template) :)

-- 
Kristian Fiskerstrand
OpenPGP keyblock reachable at hkp://pool.sks-keyservers.net
fpr:94CB AFDD 3034 5109 5618 35AA 0B7F 8B60 E3ED FAE3

Attachment: signature.asc
Description: OpenPGP digital signature


Current thread: