full-disclosure - What will happen to bugtraq, hosted by Symantec...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: lists at nolog.org (Martin Peikert)
Subject: What will happen to bugtraq, hosted by Symantec...

Hello,

for anyone who hasn't read that already: oisafety (members: @stake, 
BindView, Caldera International (The SCO Group), Foundstone, Guardent, 
ISS, Microsoft, NAI, Oracle, SGI, and *Symantec*) wants to establish a 
process of reporting vulnerabilities - see 
http://www.oisafety.org/process.html

Comments to that draft (sent to draft-feedback@...afety.org) will be 
accepted for 30 days.

,--- qoute from http://www.securityfocus.com/news/5458
|
| Whether or not that includes popular forums and mailing lists like
| Bugtraq, NTBugtraq and Full Disclosure is a gray area, says Blake [1],
| that the group deliberately left open to interpretation.
`--- end quote

GTi
[1] same source as the quote: Scott Blake, a VP at security software 
firm BindView, an OIS member