"your point is based on one idea: security = hidden mailing list"

With regard to the first point, you're partially right. The Linux kernel needs a security *team*. That includes having a central point of contact to handle security issues.

"Your arguments are good. If only you took the time to read the big thread about that , and arguments on what was there , not only on the first emotive email."

The discussion of HOW a central point of contact is brought to fruition for the Linux kernel is probably out of the scope of my discussion - as mentioned in my article, I'm aware of the fact that this is being worked on.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/296/30364#30364