Re: [Full-Disclosure] CERT, Full Disclosure, and Security By Obscurity

[KF]

Blue Boar wrote:

Georgi Guninski wrote:

Recently when I notified some vendors about a vulnerability, I wrote something like a license agreement that the info should not be disclosed to m$, cert, mitre, sf and others.

What have you got against Mitre?

I have certainly seen some of the folks at Mitre go out of their way to get things documented properly and other things of that nature quite a few times. Steven M. Christey in particular...

-KF


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html