Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey

To: Adam Shostack <adam@HOMEPORT.ORG>, "Steven M. Christey" <coley@linus.mitre.org>
Subject: Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
From: "Marcus J. Ranum" <mjr@nfr.net>
Date: Thu, 21 Sep 2000 09:43:09 -0400
Cc: cve-editorial-board-list@lists.mitre.org
Delivery-Date: Thu Sep 21 09:47:53 2000
In-Reply-To: <20000921093619.A11255@weathership.homeport.org>
References: <200009210010.UAA29952@teagarden.mitre.org><200009210010.UAA29952@teagarden.mitre.org>

At 09:36 AM 9/21/00 -0400, Adam Shostack wrote:
>Alice discovers a vulnerability, and wants to tell Bob, but thinks Bob
>may steal it.

If I understand correctly, the concern is that someone might
"steal" the "credit" for disclosing something? So is this just
an exercise in protecting marketing rights to see who gets to
publicly count coup on a vendor?

mjr.

-----
Marcus J. Ranum
Chief Technology Officer, Network Flight Recorder, Inc.
Work:                  http://www.nfr.net
Personal:              http://www.ranum.com

Follow-Ups:
- Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
  - From: aleph1@securityfocus.com

References:
- [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
  - From: "Steven M. Christey" <coley@linus.mitre.org>
- Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
  - From: Adam Shostack <adam@homeport.org>

Prev by Date: RE: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
Next by Date: RE: [CVEPRI] Handling new vulnerabilities discovered by Steve Chr istey
Prev by thread: Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
Next by thread: Re: [CVEPRI] Handling new vulnerabilities discovered by Steve Christey
Index(es):
- Date
- Thread