full-disclosure - [Dailydave] Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: HalVar at gmx.de (Halvar Flake)
Subject: [Dailydave] Re: Public Review of OIS Security Vulnerability Reporting and Response Guidelines

Hey all,

> It's rare, but there are still security companies and individuals who do 
> not owe their entire business to money from Microsoft. It's July 4th. 
> and some of us are Americans who understand the concept of independance.

I am not american, but I have to agree to all of the following:

 - Nobody trusts the OIS or its motives.
 - the purpose of the OIS is to lobby towards a business model for Microsoft

  and the other OIS members that involves the removal of non-compliant 
 security researchers.
 -  This call for feedback is a thinly disguised attempt to get public 
 legitimacy and allow the OIS to claim it has community backing, which it 
 clearly does not.

Cheers,
Halvar Flake

-- 
"Sie haben neue Mails!" - Die GMX Toolbar informiert Sie beim Surfen!
Jetzt aktivieren unter http://www.gmx.net/info