Re: CERT, Full Disclosure, and Security By Obscurity

[KF <dotslash () snosoft com>]

Blue Boar wrote:
> Georgi Guninski wrote:
>
> > Recently when I notified some vendors about a vulnerability, I wrote 
> > something like a license agreement that the info should not be 
> > disclosed to m$, cert, mitre, sf and others.

> What have you got against Mitre?

I have certainly seen some of the folks at Mitre go out of their way to 
get things documented properly and other things of that nature quite a 
few times. Steven M. Christey in particular...

-KF


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html