full-disclosure - Re: Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20110412160113.GG12726@sentinelchicken.org>
Date: Tue, 12 Apr 2011 09:01:13 -0700
From: Tim <tim-security@...tinelchicken.org>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Announcement posts and the charter (was Re:
 INSECT Pro 2.5.1 released)

> 2)Only announcements for OSI approved projects.  Webappsec has this
> policy I think, and it rewards people who share the most openly.

I would argue that something like this is the best for full
disclosure.  Afterall, if you release a tool, your techniques are not
really fully disclosed if you keep the source code closed.  

Note that open source != free (example: commercial PGP), but I would
think the source code should be made publicly accessible, even if the
licensing is more restrictive.

However, in the case of "INSECT Pro", the frequency of posts is far
too high, regardless of other considerations.

tim

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/