Re: [VulnDiscuss] Cybersecurity, Research & Disclosure Conference

Thanks for the invitation just a bit late. In general
if you really want to someone be there you take your
time and invite people. This behaviour is very common
in OIS, for example the OIS "Guidelines for Security
Vulnerability Reporting and Response Process" draft
was made only by OIS members, then they asked for
feedback and fix some draft lines to make some people
happy. Always indepedent researchers are the last
resource to get involved when disscusing vulnerability
disclosure, this is a big mistake...tired of
disscusing these things...

PS: It's amazing how fast OIS is moving and it's a
shame that one of it's members don't follow OIS
rules(...... wake up!).

Cesar.
--- Chris Wysopal <[email protected]> wrote:
> 
> By my count five out of the seventeen speakers so
> far work for
> organizations involved with the Organization for
> Internet Safety.
> Certainly not a majority, but a lot of participation
> here shouldn't come as
> a surprise as OIS is the only organization that has
> stepped up and tried to
> bring researchers and technology vendors together
> through a common
> disclosure process.
> 
> More active independant security researcher
> participation would help make
> the conference better.  I encourage people in this
> group to either attend
> or email Jennifer Granick <[email protected]>
> about getting a speaker
> slot.
> 
> -Chris
> 


__________________________________
Do you Yahoo!?
Protect your identity with Yahoo! Mail AddressGuard
http://antispam.yahoo.com/whatsnewfree