| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
From: jeremiah at nur.net (Jeremiah Cornelius) Subject: Stanford Law School Conference on CyberSecurity, Research, and Disclosure -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This Larry Lessig and Jennifer Granick's anti-DMCA gig... Stanford Law School CENTER FOR INTERNET AND SOCIETY Conference on CyberSecurity, Research, and Disclosure NOVEMBER 22, 2003, STANFORD, CA Background This conference explores the relationship between computer security, privacy, and disclosure of information about security vulnerabilities. September 11th gave new urgency to the debate over whether information collection and dissemination is dangerous or empowering. One view is that vulnerability information should be kept secret and out of the hands of potential criminals and foreign agents. Another view is that the public needs to be informed about security weaknesses, so that people can take appropriate precautions and so that there will be a constituency to pressure for the rapid repair of vulnerabilities. Meanwhile, policy makers struggle to find a balance between promoting security research, constructive information sharing, remediation and protecting commercial interests. Industry has tried to develop "best practices" for reporting and repairing vulnerabilities, but major disagreements - over how much information to disclose, to whom, and when - persist. More at: http://cyberlaw.stanford.edu/security/ Jeremiah Cornelius and the Deep Fix -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux) iD8DBQE/mMx9Ji2cv3XsiSARAphIAKCs1x+W7tjPA38uI7b0YLRauUbiigCfUS84 FlXN1v8hTyb70Pj74p0QnIU= =x6WQ -----END PGP SIGNATURE-----
Powered by blists - more mailing lists