Date: Tue, 7 Oct 2014 11:58:50 +0400 From: Solar Designer <solar@...nwall.com> To: oss-security@...ts.openwall.com Subject: Re: Who named shellshock? On Tue, Oct 07, 2014 at 09:47:28AM +0200, Florian Weimer wrote: > * Solar Designer: > > > It is insufficient that "it was an honest mistake" and that "apologies > > were made and accepted." > > Why? In my opinion, it was important for this community to know whether or not the information leaked to someone unintended prior to the CRD. Your previous messages did not specifically address this question, hence my insistence on a reply. > Who determines what is appropriate in such cases, anyway? Everyone determines for themselves. I felt I was in a position where this community would reasonably expect me to ask you this inconvenient question. So I did. > > The article has "Sep 24, 2014 8:35 AM PT" on it, which is 15:35 UTC. > > Did the article's author receive the information before or after 14:00, > > and when exactly? > > The author does not work for the news organization in question, and he > had legitimate and need-to-know access to the information as part of > his regular employment. I hope this clarifies things. Yes, it does. Thank you! To summarize, this article does not indicate any leak, given the clarification you provided. Alexander
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.