Re: Forum for security-review of code?

2002-06-10 Thread Wichert Akkerman
Previously Karl E. Jorgensen wrote:
> Can anybody suggest a suitable forum/mailing list to ask for help on
> this?

The security-audit list comes to mind. Google can tell you where to
find it :)

Wichert.

-- 
  _
 /[EMAIL PROTECTED] This space intentionally left occupied \
| [EMAIL PROTECTED]http://www.liacs.nl/~wichert/ |
| 1024D/2FA3BC2D 576E 100B 518D 2F16 36B0  2805 3CB8 9250 2FA3 BC2D |


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Re: Forum for security-review of code?

2002-06-09 Thread Noah L. Meyerhans
On Mon, Jun 10, 2002 at 12:14:34AM +0100, Karl E. Jorgensen wrote:
> Can anybody suggest a suitable forum/mailing list to ask for help on
> this?

At one point (a year ago?  more?) somebody suggested creating
debian-codereview to provide exactly such a forum.  I don't remember who
it was, but they said they were going to file a wishlist bug on
lists.debian.org.  I just looked for the bug report at
http://bugs.debian.org/lists.debian.org but didn't find any sign of it.
I think it's a good idea to create such a list.  I'll file a wishlist
bug unless somebody can convince me of a reason not to...

noah

-- 
 ___
| Web: http://web.morgul.net/~frodo/
| PGP Public Key: http://web.morgul.net/~frodo/mail.html 


pgp5cLEtljSdX.pgp
Description: PGP signature


Forum for security-review of code?

2002-06-09 Thread Karl E. Jorgensen
I have authored smash [1], which I hope at some point will make its way
to the Debian archves.

But... Security is not my speciality, and my code is bound to have bugs
and security holes etc in it. So I'm keen to have other people than
myself study the code and point out security flaws etc.

Can anybody suggest a suitable forum/mailing list to ask for help on
this?

[1] http://www.karl.jorgensen.com/smash
-- 
Karl E. Jørgensen
[EMAIL PROTECTED]
www.karl.jorgensen.com
... An rfc2324 advocate
http://www.rfc.net/rfc2324.html


pgpvhies5E410.pgp
Description: PGP signature