|Main Archive Page > Month Archives > full-disclosure-uk archives|
theyve been doing this 4 years. get in the now.
On Tue, Aug 5, 2008 at 11:27 AM, n3td3v <firstname.lastname@example.org> wrote:
> ---------- Forwarded message ----------
> From: n3td3v <email@example.com>
> Date: Tue, Aug 5, 2008 at 4:24 PM
> Subject: Comment on: Microsoft to give partners heads-up on security
> To: n3td3v <firstname.lastname@example.org>
> by n3td3v August 5, 2008 8:17 AM
> Verbal contracts of non-disclosure agreements don't work, you need a
> new law in place, which I call the responsible disclosure act,
> http://seclists.org/fulldisclosure/2008/Jul/0439.html to enforce the
> agreement by a law if the agreement is broken. Or are you guys just
> gonna do another "oops the cat's out the bag" again like what happened
> with the verbal contract agreement Dan Kaminsky had with everyone
> before a blog entry leaked the vulnerability by *accident*. Is this
> Microsoft agreement of non-disclosure actually enforceable by any
> current law? If not a new law is needed to be drawn up, see the link
> above, or this "Microsoft Active Protection Program" is gonna turn out
> a complete shambles.
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/