[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 4 Apr 2011 22:32:29 +0400
From: Solar Designer <solar@...nwall.com>
To: oss-security@...ts.openwall.com
Subject: Re: Closed list
On Mon, Apr 04, 2011 at 03:56:15PM +0200, Marcus Meissner wrote:
> On Sun, Apr 03, 2011 at 08:11:11PM -0400, Michael Gilbert wrote:
> > Benji's trolling does raise a couple real issues. The private keys and
> > passphrases of those responding here have now become highly lucrative
> > targets for attackers. Hence, everyone on this new list needs to use
> > good practices to keep their keys, hard drives, and computers safe.
> > There should probably be some common guidelines for key safety for all
> > participants.
>
> So would be my work mailbox in previous times.
>
> I guess you are overestimating the value of the information that could
> be possibly gained.
Yes, I think folks are overestimating the value of the information that
was on vendor-sec, and I am going to try to reduce that value even
further for the new Linux distros list (such as by pushing discussions
on non-medium severity issues elsewhere, and by limiting the embargo
periods). I think vendor-sec was primarily a target of attacks as a
challenge, not so much for the value of the information that it actually
carried.
Alexander
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
