Re: Research/development procedures in vuln-dev

[BlueBoar () THIEVCO COM (Blue Boar)]

Bluefish wrote:
> Just wanted to notify all you people that the LFN bug we discussed has
> been re-discovered in bugtraq ;-) I dunno, maybe we should overlook our
> our procedures here?
>
> Once a bug is seemingly well researched, in the future we probably should
> concider forwarding to bugtraq [as it seemingly isn't comment knowledge
> just because it's old in vuln-dev]

Indeed, I should probably be the one doing that.  I have done so for
a few things in the past, I've just been lax.  This is also a good
opportunity for me to point out to folks that this will be going on.
I'll do my absolute best to ensure that people get credit for the
information.

People should be aware ahead of time that, once again, you're stuck
with my judgment.  In this case, that means that I'll have to decide
when something goes over to Bugtraq, which means I'll sometimes do
it too late, sometimes too soon (i.e. before we really fully
discussed it) and sometimes I'll be posting things that have no basis
in reality, simply because I won't have the resources to judge the
accuracy of the info, and there won't always be enough discussion here
to decide.

People who want to do their own posts to Bugtraq and other lists
are always welcome to.

On a completely unrelated topic, I haven't had my machine functioning
quite correctly for a couple days, which is why there was the lull
in posts being put through, followed by a sudden burst.  Also, I've
been going a little easy on the off-topic posts.  I'm going to reign that
back in.

                                BB