OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Things to do before vulnerability disclosure

From: Shawn Merdinger (shawnmergmail.com)
Date: Mon Jun 15 2009 - 14:22:11 CDT

While US law focused, you might take a look at the few guides by the
EFF (Electronic Frontier Foundation).

http://www.eff.org/issues/coders/vulnerability-reporting-faq

Cheers,
--scm

On Mon, Jun 15, 2009 at 2:14 PM, Giuseppe
Fuggiano<giuseppe.fuggianogmail.com> wrote:
> What are, if any, the legal and "ethical" things to do before someone
> could publicly disclosure a given vulnerability?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/