|
New Security Organization for Open Source Vendors |
|
|
|
Posted by Ryan Berens
|
It's an interesting idea, notably because such an organization has yet to be created. Furthermore, to ease the pangs of such a new organization, it's pretty informal, to provide a more friendly format for such touchy issues as vendor vulnerabilities.
The concept is moderately similar to full-disclosure or bugtraq, but is aimed particularly at OSS vendors and authors. Because of the sensitivity of some issues on vendor-sec (pre-disclosure issues, etc.) having a large number of people on vendor-sec isn’t really viable, so oss-security aims to fill that gap by allowing those interested in security (and not necessarily members of vendor security teams) to discuss public issues, coordinate audits, or whatever. The aim is to have a stronger OSS security community and to allow people with interest and expertise to get involved, without having to adhere to the strict “code” associated with vendor-sec.
Read this full article
Powered by AkoComment! |
