Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <E1hkWIu-0004Qz-Vq@rmmprod07.runbox>
Date: Mon, 08 Jul 2019 12:15:48 -0400 (EDT)
From: "David A. Wheeler" <dwheeler@...eeler.com>
To: "oss-security" <oss-security@...ts.openwall.com>
CC: "oss-security" <oss-security@...ts.openwall.com>
Subject: Re: linux-distros membership application - Microsoft

On Sun, 7 Jul 2019 15:42:58 +0200, Solar Designer <solar@...nwall.com> wrote:
> I don't view it as a present, but as us being reasonable.  The rules
> don't require the 1 year track record to be for Linux specifically...
> So I suggest we subscribe "Microsoft Linux Systems Group" on August 8.

I think that's entirely reasonable.  Indeed, I think it'd be reasonable to add
them now.  That said, ensuring that the "right sub-group" is added is appropriate,
since we want to ensure that people contact the correct group.


Georgi Guninski:
> ... The Halloween Documents are from 1998, which makes 21 years.

That is a long time ago.  People and companies change, and
in this case there's good evidence that change has occurred.
Forgiveness is a good idea, for both people and companies.
Yes, companies have a profit motive, but that's not at all disqualifying.

Besides, the beneficiaries of linux-distros work aren't just
the distros; they also include the *users* of those distros.  As noted in
http://oss-security.openwall.org/wiki/mailing-lists/distros ,
the list is only "to report and discuss security issues that are not yet public
(but that are to be made public very soon...)...
It is intended that these lists be used primarily to provide actionable information
to multiple distribution vendors at once."
This enables everyone to coordinate so that users get *fixes*
when the issue becomes public, not just a problem the users can't deal with.

In short, I support allowing the Microsoft Linux Systems Group to join linux-distros.

--- David A. Wheeler

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.