[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.LNX.4.64.0802180828450.23968@wotan.suse.de>
Date: Mon, 18 Feb 2008 08:32:49 +0100 (CET)
From: Sebastian Krahmer <krahmer@...e.de>
To: xvendor@...ts.openwall.com
Subject: Re: "going public"
On Fri, 15 Feb 2008, Solar Designer wrote:
Hi,
Some questions came in mind:
1. Whos actually on the list?
2. Whats its exact purpose? Like vendor-sec? Discussing patches/exploits?
3. vendors are only willing to post private patches if its a closed list
and they know who is subscribed
4. If the purpose is clear it needs some announcement (to the dedicated
folks) so that folks
know about it and it soon drives itself.
5. We should avoid a vendor-sec clone, otherwise the competition will
destroy both lists.
l8er,
Sebastian
> Hi,
>
> I'd like to revitalize this list. Two of the things I'd like to do are:
>
> 1. Make the xvendor archive public on the web, with e-mail addresses
> obfuscated. This will apply to past messages as well (there are 60 of
> them so far, this one is the 61st). Initially, I'd host the archive on
> the Openwall website only, with full control over how addresses are
> obfuscated, etc. Submitting the list to third-party archives, some of
> which have far more advanced web interfaces, may be done later.
>
> 2. Describe xvendor on a public website - including purpose and policy
> of the list. I am not sure what website this should be on; maybe I'll
> just put the info somewhere on the Openwall website for lack of a better
> place (that would actually receive visitors).
>
> Note that right now the list is not pre-moderated - there's neither
> subscription nor message moderation. Perhaps this will have to change
> in a while after "going public".
>
> Comments? Objections?
>
>
--
~
~ perl self.pl
~ $_='print"\$_=\47$_\47;eval"';eval
~ krahmer@...e.de - SuSE Security Team
~ SUSE LINUX Products GmbH, GF: Markus Rex, HRB 16746 (AG Nuernberg)
Powered by blists - more mailing lists
Please check out the
xvendor mailing list charter.
