Date: Tue, 5 Apr 2011 16:30:37 +0400 From: Solar Designer <solar@...nwall.com> To: oss-security@...ts.openwall.com Subject: Re: Closed list On Tue, Apr 05, 2011 at 07:19:08AM -0400, Josh Bressers wrote: > Not adding Apple to any coordination list would be plain silly. They were > far more active than most of the distributions. Yes. But why do they need to be aware, say, of glibc vulnerabilities (ones that are in fact believed to be glibc-specific)? > I'm starting to worry we've created rules for the sake of rules, which > almost never has a net positive outcome. What do you propose? Go back to a vendor-sec style list, open to anyone who is approved by other list members, and accept the accusations of being subjective in who we subscribe? I can set one up alongside the Linux distros list... then let the senders decide which list they want. Alexander
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.