[lkml]   [2005]   [Jan]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: security contact draft

    On Thu, 13 Jan 2005, Alan Cox wrote:
    > It's not documenting the stuff Linus seems to be talking about which is
    > a public list ? Or does Linus want both ?

    I see myself as pretty extreme when it comes to my approach to security.

    And I actually distrust extremes. I'm at one end of the spectrum, and
    vendor-sec is at the other (I'm not even counting the head-in-the-sand
    approach as part of the spectrum ;). Knowing that, I'd expect that most
    people are somewhere in between.

    Which to me implies that while what I personally _want_ is total openness,
    that's not necessarily what makes the most sense in real life.

    So I want to give people choice. I want to encourage openness. But hell,
    if we have a closed list with a declared short embargo that is known to
    not play games (ie clock starts ticking from original discovery, not from
    somebody elses embargo), that's good too.

    Let people vote with their feet. If vendor-sec ends up being where all the
    "important" things are discussed - so be it. We've not lost anything, and
    at worst a "kernel-security" list would be a way to discuss stuff that was
    already released by vendor-sec.

    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to
    More majordomo info at
    Please read the FAQ at

     \ /
      Last update: 2009-11-18 23:46    [W:0.021 / U:59.456 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site