Re: Closed list

[Solar Designer <solar () openwall com>]

On Tue, Apr 05, 2011 at 07:19:08AM -0400, Josh Bressers wrote:
> Not adding Apple to any coordination list would be plain silly. They were
> far more active than most of the distributions.

Yes.  But why do they need to be aware, say, of glibc vulnerabilities
(ones that are in fact believed to be glibc-specific)?

> I'm starting to worry we've created rules for the sake of rules, which
> almost never has a net positive outcome.

What do you propose?  Go back to a vendor-sec style list, open to
anyone who is approved by other list members, and accept the accusations
of being subjective in who we subscribe?  I can set one up alongside the
Linux distros list... then let the senders decide which list they want.

Alexander