[243] in bugtraq
In reply to comments about new policy
daemon@ATHENA.MIT.EDU (Neil Woods)
Mon Nov 28 23:06:05 1994
From: Neil Woods <neil@legless.demon.co.uk>
To: bugtraq@fc.net
Date: Tue, 29 Nov 1994 01:44:53 +0100 (GMT)
Cc: 8lgm@bagpuss.demon.co.uk
Firstly, apologies for not replying to everyone who has contacted us
directly, I'd be here all night if I did.
Before I start, I'd like to confirm that both Karl and myself are 100%
behind full disclosure.
However, if you recall, due to a lot of criticism of the way we were
publishing advisories, we requested comments on how we should provide
further information. This new style was defined by the user community
at large, we didn't decide on it. If you want to vent your feelings,
go on comp.security.unix and do it there, thats where you will find
the creators of this new style.
In fact, this has made providing information to our subscribers a
very difficult task. Certain vendors feel under no pressure to provide
fixes at all, and have expected us to 'keep quiet'.
You must also remember that both myself and Karl provide this as a
free service, and put a lot of time into it. Everything we provide is
based on our own work, if hints were obtained from bugtraq, we will give
credit to that. Threats to no longer provide information to us unless
we again change policy is a fallacy.
Since there's just as many people disgruntled with either method, we
have decided to take a vote on it. Send mail to:
vote-yes@bagpuss.demon.co.uk (for full disclosure)
vote-no@bagpuss.demon.co.uk (against full disclosure)
Whichever gets the most votes wins, multiple votes disallowed.
Votes will be taken up to 31st December 1994, further advisories will
not be published in the meantime.
Neil
--
Bull in the Heather, Me and My Charms, The Lights, Sensual World, Go, Ritual,
Handsome and Gretel, Take Me, Blue Room, Drunken Butterfly, She's Lost Control.
...like a badger with an afro throwing sparklers at the Pope...
