It's about posting security advisories. The initial poster advises they notified the gmail team, and posted this advisory 10 days later.
It is immaterial whether an application is in alpha, beta or production. If the software or application is in use outside the development team, and there is a security issue, it is relevant to this list. It's called Full Disclosure for a reason... not partial disclosure, not disclosure of production applications only... Full Disclosure. If you want partial disclosure, you may need to rethink your subscription to the list. -- Tremaine IT Security Consultant ----- Original Message ----- From: System Outage <[EMAIL PROTECTED]> Date: Mon, 5 Jul 2004 06:46:42 -0700 (PDT) Subject: Re: [Full-Disclosure] Gmail Information Disclosure Vulnerability To: [EMAIL PROTECTED] If it's not about respect then what is it about? You have no respect for the Gmail Team, that's for sure. I guess this list isn't about respect... It's about kiddies posting advisories and exploits for fun and little care for the vendor(s). Cheerio [EMAIL PROTECTED] wrote: System Outage wrote: |The correct channel to post such "bugs" is the Gmail contact link for "bug |reports". I have already contacted Gmail about 10 days ago, but I have not received any replies till this moment. |If you had waited until the Gmail dev team declared gmail a public release, |you would have gained more respect in the security community scene. I don't think this is about respect afterall. Regards, Ahmed Motaz ------------------------------------------------------ Mailsurf.com your communication portal for SMS, Email, Fax, E-Cards and more. www.mailsurf.com _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html ________________________________ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
