full-disclosure - Morning Wood Poll

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <see8639a.049@mail.cnbcbank.com>
From: David.Sentelle at cnbcbank.com (David Sentelle)
Subject: Morning Wood Poll

I've already cast my vote, but I think a simple yes/no is not sufficient for the real solution.

The real solution is to have a fully open full-disclosure mailing list, only for full-disclosure.  People not disclosing vulnerabilities or bugs would be warned then banned on repeat offenses.  

To resolve the issue of ongoing correspondence regarding disclosures made on the full-disclosure list, there would be a full-disclosure-DISCUSSION list.  That would be the 'noise' list, that would contain 99% of what is currently in full-disclosure.

This post should go to the discussion list.  Many of Morning Wood's posts would hopefully go to the discussion list, with the disclosures he's made going to the full-disclosure list.

Would the addition of a discussion list, and the policy change for the full-disclosure list, really cramp anyone's freedom of speech or the value of the full-disclosure list?

This e-mail and any files transmitted with it are confidential and 
intended solely for the use of the individual or entity to which they
are addressed.  If you have received this e-mail in error, you are 
prohibited from using, divulging any of its contents, or forwarding 
this email.  Please notify admin@...cbank.com and delete it from 
your system.