[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1259315225.139113.1303741338060.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Mon, 25 Apr 2011 10:22:18 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Subject: Re: Closed list
----- Original Message -----
> On Sun, Apr 24, 2011 at 03:30:29PM +0400, Solar Designer wrote:
> > Personally, I'd be happy to invite Apple, *BSD's, and Google security
> > folks to have a sit at the table. Since Google doesn't release a Linux
> > distro for others to use, ...
>
> Oh, I was too quick to say that. Android, Chromium OS, and Chrome OS
> _might_ qualify once we lift the "was a vendor-sec member" requirement.
>
> These are very different from typical Linux distros, which is why it did
> not occur to me to consider them in this context.
>
We included Mozilla in vendor-sec due to them being a large distributor of
open source software. Google certainly fits into this category these days
with things like Andriod and Chrome (both browser and OS).
I've been contacted by some Andriod folks in the past. They're keen to
start doing public advisories, most other Google projects already do this.
I suspect the real problem we'll hit with someone like Google is who to
subscribe. We could easily end up with hundreds of requests from a company
that size.
Thanks.
--
JB
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
