full-disclosure - Stanford Law School Conference on CyberSecurity, Research, and Disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200310232353.51879.jeremiah@nur.net>
From: jeremiah at nur.net (Jeremiah Cornelius)
Subject: Stanford Law School Conference on CyberSecurity, Research, and Disclosure

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 This Larry Lessig and Jennifer Granick's anti-DMCA gig...  

 Stanford Law School
 CENTER FOR INTERNET AND SOCIETY
 Conference on CyberSecurity, Research, and Disclosure
 NOVEMBER 22, 2003, STANFORD, CA

Background

 This conference explores the relationship between computer security, privacy, 
and disclosure of information about security vulnerabilities.

 September 11th gave new urgency to the debate over whether information 
collection and dissemination is dangerous or empowering. One view is that 
vulnerability information should be kept secret and out of the hands of 
potential criminals and foreign agents. Another view is that the public needs 
to be informed about security weaknesses, so that people can take appropriate 
precautions and so that there will be a constituency to pressure for the 
rapid repair of vulnerabilities. Meanwhile, policy makers struggle to find a 
balance between promoting security research, constructive information 
sharing, remediation and protecting commercial interests. Industry has tried 
to develop "best practices" for reporting and repairing vulnerabilities, but 
major disagreements - over how much information to disclose, to whom, and 
when - persist.

More at:
http://cyberlaw.stanford.edu/security/

Jeremiah Cornelius
and the Deep Fix
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)

iD8DBQE/mMx9Ji2cv3XsiSARAphIAKCs1x+W7tjPA38uI7b0YLRauUbiigCfUS84
FlXN1v8hTyb70Pj74p0QnIU=
=x6WQ
-----END PGP SIGNATURE-----