k8em0
-
@ one would hope, that's the basic idea anyway. @ yeah, that would be a better title, much more accurate.
13 minutes ago
from web
-
@ that is a biz particular that is out of scope. Besides, being obsolete by the time it comes out is not new to ISO. ;-)
about 1 hour ago
from web
-
@ things like Have a way to be contacted w/vuln info, not Thou shalt have a web form. Biz particulars are out of scope.
about 1 hour ago
from web
-
@ this is a guide for vendors, gives them basic elements to receive vulns, distrib remed info - no business particulars
about 1 hour ago
from web
-
@ that was you?! I was sure 1-800-smrtass was not on my speed dial, but it must be! Catch up with you tomorrow. :-)
about 3 hours ago
from web
-
@ handing you an ISO-compliant tissue. ;-) Srsly, we should chat offline. I've been amazed at some of the previous drafts too.
about 3 hours ago
from web
-
@ just yanking your chain, man. LOL. This is all too funny to me that it has everyone so upset when it really won't affect them
about 3 hours ago
from web
-
Attention @ @ @ @ @ : If this standard doesn't solve the disclosure debate, blame @ :)
about 3 hours ago
from web
-
@ what are you complaining about? ur in touch with the editor & can tell him what to write. No excuse for it not being perfect.
about 3 hours ago
from web
-
@ even if ISO changed its review rules for you or anyone else, it's still only National Bodies who ever get to vote on anything
about 3 hours ago
from web
-
@ the editor only has the agreed-upon changes from the meeting, he has to create the next draft from that blueprint. wait for it
about 3 hours ago
from web
-
@ What it is: a clue/guide for vendors who don't have any vuln handling policy. What it isn't: telling you what to do
about 3 hours ago
from web
-
@ the latest draft has ASAP in it. Wait til the next draft before spouting off. ;-P Unless this is more fun spreading the FUD.
about 3 hours ago
from web
-
@ I have been working steadily keeping this thing in scope for vendor actions only, leaving finders actions out of it.
about 3 hours ago
from web
-
@ I'm glad this has spurned discussion among smart people, but has no one read what I've been tweeting? This is a vendor guide.
about 3 hours ago
from web
-
@ again, the ack time is for the Vendor to ack the finder that they received the vuln report. Youre taking things out of context
about 4 hours ago
from web
-
@ you're reading the old draft? Not the one with the changes from this last meeting? The editor hasn't made many changes yet.
about 4 hours ago
from web
-
@ No public draft that I know of. You have to be part of a National Body or other liaison to ISO as far as I know.
about 12 hours ago
from web
-
@ description is what it is, but I can tell you the draft is scoped to vendors only. Most researchers are not ISO compliant anyway!
about 12 hours ago
from web
-
How many of you really think ISO was going to tell researchers what to do?! This is a guide for vendors only, hopefully to make them better.
about 14 hours ago
from web
|
|
