[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: help needed with DotGNU security review (was Re: ..researchers org..)

To: Norbert Bollow <nb@SoftwareEconomics.biz>
Subject: Re: help needed with DotGNU security review (was Re: ..researchers org..)
From: Crispin Cowan <crispin@immunix.com>
Date: Fri, 21 Nov 2003 20:38:45 -0800

Norbert Bollow wrote:

How should I go about trying to find people who are skilled in the
area of finding security bugs, and who would be willing to have a
good look at key components of DotGNU (see http://dotgnu.org ) before
they're widely deployed?

This is what Sardonix was designed to do. I cannot assure that you will get a taker, but I suggest a post to the sardonix mailing list would help.

Hint: subscribe to the list first. The list is configured to moderate non-subscriber posts, and I'm killing off about 25 spams a day now, so a legit non-subscriber post could get lost in the shuffle.

Crispin

--
Crispin Cowan, Ph.D.           http://immunix.com/~crispin/
Chief Scientist, Immunix       http://immunix.com
           http://www.immunix.com/shop/

References:
- Security researchers organization
  - From: "Thor Larholm" <thor@pivx.com>
- Re: Security researchers organization
  - From: Crispin Cowan <crispin@immunix.com>
- help needed with DotGNU security review (was Re: ..researchers org..)
  - From: Norbert Bollow <nb@SoftwareEconomics.biz>

Prev by Date: Opera directory traversal and buffer overflow
Next by Date: webfs 1.7.x:webserver remote file overflow exploit (use ftpd to mkdir)
Previous by thread: help needed with DotGNU security review (was Re: ..researchers org..)
Next by thread: Re: Security researchers organization
Index(es):
- Date
- Thread