[Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Steven Pinkham
I agree this is a discussion worth having. I think the policy should be more objective to give us a clear policy to abide by and enforce. Suggestions for policy: 1)No tool announcements. Best rational I can think of for this one: Tool announcments should go to the specific group they are for.

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread phil
Just keep that simple, the post hit the non acceptable content. Gratuitous advertisement, product placement, or self-promotion is forbidden. My opinion, but if the product could be free, like it was, then I don't mind seeing those kind of post, but for anything commercial FD is not there

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Christopher Truncer
I agree with Steve. I joined this list for learning about the latest security vulnerabilities. It is a great method of staying current with everything going on in the IT Sec world. I think I can speak for some people saying we did not join to have a free but donation required tool promoted

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Tim
2)Only announcements for OSI approved projects. Webappsec has this policy I think, and it rewards people who share the most openly. I would argue that something like this is the best for full disclosure. Afterall, if you release a tool, your techniques are not really fully disclosed if you

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Steve Pinkham
On 04/12/2011 09:04 AM, phil wrote: Just keep that simple, the post hit the non acceptable content. Gratuitous advertisement, product placement, or self-promotion is forbidden. My opinion, but if the product could be free, like it was, then I don't mind seeing those kind of post, but

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread rancor
What to do about it? It's not moderated? Just ignore stuff and use the often used key called delete. Simple as that =) // rancor Den 12 apr 2011 21.16 skrev Steve Pinkham steve.pink...@gmail.com: On 04/12/2011 09:04 AM, phil wrote: Just keep that simple, the post hit the non acceptable

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Ryan Sears
...@gmail.com To: Steve Pinkham steve.pink...@gmail.com Cc: full-disclosure@lists.grok.org.uk Sent: Tuesday, April 12, 2011 3:50:59 PM GMT -05:00 US/Canada Eastern Subject: Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released) What to do about it? It's not moderated

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Michal Zalewski
It's whatever, un-moderated means exactly that. No-one can tell anyone else what to release/write. Period. Of course you can. That's what the charter is for. Unmoderated means simply that the charter is usually not proactively enforced (but even that is hardly an absolute guarantee). /mz

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Pete Smith
I agree, un-moderated doesn't mean that people can't be banned for breaking the rules or being a troll... Pete On 13 April 2011 06:35, Michal Zalewski lcam...@coredump.cx wrote: It's whatever, un-moderated means exactly that. No-one can tell anyone else what to release/write. Period. Of

Re: [Full-disclosure] Announcement posts and the charter (was Re: INSECT Pro 2.5.1 released)

2011-04-12 Thread Raj Mathur (राज माथुर)
On Tuesday 12 Apr 2011, Steven Pinkham wrote: [snip] 2)Only announcements for OSI approved projects. Webappsec has this policy I think, and it rewards people who share the most openly. OSI doesn't approve projects, only licences. I presume you mean Only announcements for projects released