oss-security - Re: announcing oCERT & oss-security to Bugtraq & f-d

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 8 Apr 2008 19:14:56 +0400
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: announcing oCERT & oss-security to Bugtraq & f-d

Josh,

Thank you for the prompt response.

On Tue, Apr 08, 2008 at 10:58:57AM -0400, Josh Bressers wrote:
> Probably not this week.  I have quite a few more pressing matters to attend
> to, and for the limited oss-security time I have, I plan to clean up the
> wiki a bit in preparation for a public announcement.

OK, that's up to you indeed, and I appreciate your work on the wiki a
lot.  I just thought that we could proceed with these tasks in parallel
to have something ready sooner rather than later.  And it does not have
to be a "big" public announcement right away - but having some
announcement text that this group is comfortable with would be helpful.

> I'm not pleased with this unneeded pressure being placed on this group
> because of the desire of oCERT.

That's not how I see it.  We had an opportunity here, which we could use
if we wanted to - but we chose not to.  That's all.

> We also need to sort out the mailing list situation before we can
> reasonably expect what will be a spike of interest.

We can trivially turn message moderation on for everyone - which is what
I will do as soon as we start getting undesirable postings.  So I am not
afraid of this list being announced on Bugtraq & f-d right now.

We can also implement your desired setup, but possibly not right away.

> Did anyone disagree with my proposal yesterday?

It looks like everyone is fine with it, and I have just responded to
that message.

Thanks again,

Alexander

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.