Home page logo

oss-sec logo oss-sec mailing list archives

Re: distros & linux-distros embargo period and message format
From: Solar Designer <solar () openwall com>
Date: Sat, 4 Feb 2012 05:45:39 +0400

On Fri, Feb 03, 2012 at 08:26:26PM -0500, Michael Gilbert wrote:
I think the important aspect here is the transparency of the private
discussion (after an appropriate delay), rather than the length of the
delay itself.

Thank you for sharing your opinion.

Yet the delay itself matters too.  There are different opinions as to
whether it is "the important aspect" or not.

That can be set by the researcher (with some reasonable
maximum, like a month).

We all should be able to see what is going on over in the closed list.
 Although it is unlikely being used for nefarious purposes (hiding
issues permanently, etc.), transparency (after a delay) is the only
way to show that it is not.  Anyway, 30 days seems appropriate.

I don't mind.  Like I said, I need a tool - a program to mass-decrypt a
PGP/MIME mbox, producing another mbox.  I think such a program might be
generally useful.  Well, or alternatively I need to introduce a
different mechanism for the archive - not treat it as a regular
subscriber like I intended to.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]