Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey

• To: Adam Shostack <adam@HOMEPORT.ORG>, "Steven M. Christey" <coley@linus.mitre.org>
• Subject: Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
• From: "Marcus J. Ranum" <mjr@nfr.net>
• Date: Thu, 21 Sep 2000 09:43:09 -0400
• Cc: cve-editorial-board-list@lists.mitre.org
• Delivery-Date: Thu Sep 21 09:47:53 2000
• In-Reply-To: <20000921093619.A11255@weathership.homeport.org>
• References: <200009210010.UAA29952@teagarden.mitre.org><200009210010.UAA29952@teagarden.mitre.org>

At 09:36 AM 9/21/00 -0400, Adam Shostack wrote:
>Alice discovers a vulnerability, and wants to tell Bob, but thinks Bob
>may steal it.


If I understand correctly, the concern is that someone might
"steal" the "credit" for disclosing something? So is this just
an exercise in protecting marketing rights to see who gets to
publicly count coup on a vendor?

mjr.

-----
Marcus J. Ranum
Chief Technology Officer, Network Flight Recorder, Inc.
Work:                  http://www.nfr.net
Personal:              http://www.ranum.com

• Follow-Ups:
  • Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
    • From: aleph1@securityfocus.com

• References:
  • [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
    • From: "Steven M. Christey" <coley@linus.mitre.org>
  • Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
    • From: Adam Shostack <adam@homeport.org>

• Prev by Date: RE: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
• Next by Date: RE: [CVEPRI] Handling new vulnerabilities discovered by Steve Chr istey
• Prev by thread: Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
• Next by thread: Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
• Index(es):
  • Date
  • Thread