Re: [VulnDiscuss] Cybersecurity, Research & Disclosure Conference

On Fri, 7 Nov 2003, Cesar wrote:

>
> Thanks for the invitation just a bit late. In general
> if you really want to someone be there you take your
> time and invite people.

Just to clarify things.  I am not an organizer of this conference.  I was
merely trying to get the word out about the conference because I hadn't
seen the announcement posted to many security lists.

> This behaviour is very common
> in OIS, for example the OIS "Guidelines for Security
> Vulnerability Reporting and Response Process" draft
> was made only by OIS members, then they asked for
> feedback and fix some draft lines to make some people
> happy.
> Always indepedent researchers are the last
> resource to get involved when disscusing vulnerability
> disclosure, this is a big mistake...tired of
> disscusing these things...

I seriously do not think the intention of the Stanford organizers was to
keep any people out of the conference that could contribute. They would
love more researcher participation.  But don't believe me. Ask them.

> PS: It's amazing how fast OIS is moving and it's a
> shame that one of it's members don't follow OIS
> rules(...... wake up!).

Again, This is not an OIS conference. It is not an @stake conference.  It
is not a VulnWatch conference. It is a Stanford conference.

-Chris

> Cesar.
> --- Chris Wysopal <[email protected]> wrote:
> >
> > By my count five out of the seventeen speakers so
> > far work for
> > organizations involved with the Organization for
> > Internet Safety.
> > Certainly not a majority, but a lot of participation
> > here shouldn't come as
> > a surprise as OIS is the only organization that has
> > stepped up and tried to
> > bring researchers and technology vendors together
> > through a common
> > disclosure process.
> >
> > More active independant security researcher
> > participation would help make
> > the conference better.  I encourage people in this
> > group to either attend
> > or email Jennifer Granick <[email protected]>
> > about getting a speaker
> > slot.
> >
> > -Chris
> >
>
>
> __________________________________
> Do you Yahoo!?
> Protect your identity with Yahoo! Mail AddressGuard
> http://antispam.yahoo.com/whatsnewfree
>