full-disclosure - Re: Call for new mailing lists @ SecurityFocus (X-POST)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4316E157.3070702@aphexer.dyndns.org>
Date: Thu Sep  1 12:09:08 2005
From: aphex at aphexer.dyndns.org (Alex Prinsier)
Subject: Re: Call for new mailing lists @ SecurityFocus
	(X-POST)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I've not known the list as it was before 2003... and I really would like
to know how it was then.

I'm not sure how to understand these lines:

> do you remember why this full-disclosure list was started in the first
> place?
> I do... undelayed, unmoderated, uncensored, disclosure, full if you
> want, room for discussions etc

Do you mean symantec first checks every message which causes a delay?
And in the case they don't like the message they delete it? Or perhaps
censor some stuff?

Alex

Frank de Wit wrote:
> That's why I wrote 'before 2003'... reading is difficult, arrogance is
> easy I see in your response, the arrogance of a Symantec I would like to
> say, but you still interest me ;-)
> I see differences, it's called delayed disclosure and it's called
> symantec (who has more securityproblems with it's own products than any
> other security software supplier(?) :-) and it's called $ to pay for
> information which used to be free before securityfocus 'went commercial'
> http://lists.grok.org.uk/pipermail/full-disclosure/2002-July/000143.html
> remember? that's the moment you went rich and blind :-)
> if you don't see it, all that yellow stuff is blinding you or the money
> is blinding you
> did the people who contributed to securityfocus got paid when you
> received all those US$ ?
> ok that's old cows, let's leave that because we're grownups... at least
> we say we are
> do you remember why this full-disclosure list was started in the first
> place?
> I do... undelayed, unmoderated, uncensored, disclosure, full if you
> want, room for discussions etc
> Why would we need another @securityfocus list if we already have this
> full disclosure list... that's whay I wrote between the lines ;-)
> Securityfocus.com was great... until it was bought by Symantec... I saw
> you come, be and die
> My opinion, if you don't like it... well... that's life
> 
> Alfred Huger wrote:
> 
>>
>>
>> Frank,
>>
>> It was acquired in 2002 not 2003. If you can actually point to
>> anything differant other than aesthetics I'd be happy to talk about it
>> and even work to change it if it's got merit. I've been here since the
>> begining - given I started it - and I really see little or any
>> differance pre vrs. post Symantec.
>>
>> -al
>>
>>
>>
>>
>> On Wed, 31 Aug 2005, Frank de Wit wrote:
>>
>>> todo?
>>> quit symantec
>>> restart the real securityfocus as it was before 2003
>>> start fulldisclosure...
>>>
>>> Alfred Huger wrote:
>>>
>>>>
>>>> All,
>>>>
>>>> As most of you know, some of the strongest value the SecurityFocus
>>>> community has to offer is that of our mailing lists. These lists
>>>> contribute a vast amount of information and dialogue to the
>>>> community at
>>>> large but they are generally held within a finite amount of lists,
>>>> which
>>>> changes little (in terms of # of lists) over time. Given this is the
>>>> case
>>>> we, every few years, make a call for new mailing lists from the
>>>> community.
>>>>
>>>> I would like to invite you to send me your thoughts on which new
>>>> mailing lists we should start here. Based off the feedback we
>>>> receive I believe we will launch a number of new lists in the late
>>>> September timeframe. I also urge you to consider becoming a
>>>> moderator for the list(s) you suggest because as a community we are
>>>> only viable if we all make an effort to participate..
>>>>
>>>> Regards,
>>>> Alfred
>>>>
>>>> Alfred Huger
>>>> Symantec Corp.
>>>> Sr. Director, Engineering
>>>> Response & Global Managed Security Services
>>>>
>>>>
>>>
>>
>> Alfred Huger
>> Symantec Corp.
>>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.0 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDFuFXrCFWJqEhh1cRAmqIAJ4n9urRiqeqPXIHjXZviISAKvFCMACdHQzI
yUC9VXTUTEaTuc7ohWJeVAo=
=b5jD
-----END PGP SIGNATURE-----