----- Original Message ----- > From: "Samuel Sidler" <[email protected]> > To: "mozilla governance" <[email protected]> > Cc: "Samuel Sidler" <[email protected]>, > [email protected], [email protected] > Sent: Thursday, July 26, 2012 10:25:39 PM > Subject: Re: Responsible Disclosure > > On Friday, July 27, 2012 12:18:38 PM UTC+7, Robert O'Callahan > wrote: > > Another question is, "Should Mozilla compel its employees to > > 'responsible > > disclose' work that was done outside of their Mozilla > > employment?" > > If they're going to use Mozilla's name, I think yes. It reflects > incredibly poor on Mozilla and hurts its reputation. > > But what I'm saying is there should be a policy that all employees > (and community) know about and understand. People should understand > not just that good Mozillians responsibly disclose but _why_ we > responsibly disclose. If they choose to break it, I'm not saying > anyone should be fired or anything that crazy, but I know I didn't > like firedrills when I shipping Firefox. I can't imagine Onity > does... Golden Rule and all that. > > -Sam
Mozilla has a long-standing policy for handling disclosures related to Mozilla and our work as Mozillians. In this case the research was outside of Mozilla, completed before the individual joined Mozilla, and is not related to Mozilla work. Mozilla typically does not have policies stating how individuals behave in their private lives. So jumping to a policy that applies outside of Mozilla work has a lot of problems. Being identified as a Mozillian, or as associated with Mozilla raises other problems. Active Mozillians and especially Mozilla employees can end up "representing" Mozilla whether they meant to or not. We've seen a bunch of this lately. I'll commit to making sure that this incident is included in the discussion of when and how people represent Mozilla, and when and how they should make sure they are not representing Mozilla. -- Michael Coates Director of Security Assurance [email protected] _______________________________________________ governance mailing list [email protected] https://lists.mozilla.org/listinfo/governance
