Full Disclosure: it's all about timing

[full-disclosure () lists netsys com (Kurt Seifried)]

I know the majority of Linux vendors (including "major" guys) have less then
half a dozen full time "security" staff (people rebuilding packages with
security patches, verifying problems, etc.). In many cases it's 1-2 (for
"large" vendors that would surprise you).

Having two people for each "position" is pretty trick in this case. One
reason none of them really get any vacation time =).


Kurt Seifried, kurt () seifried org
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://seifried.org/security/