From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from smtp1.linuxfoundation.org (smtp1.linux-foundation.org [172.17.192.35]) by mail.linuxfoundation.org (Postfix) with ESMTPS id 4F9A3D54 for ; Sat, 8 Sep 2018 15:29:32 +0000 (UTC) Received: from out1-smtp.messagingengine.com (out1-smtp.messagingengine.com [66.111.4.25]) by smtp1.linuxfoundation.org (Postfix) with ESMTPS id C77D0623 for ; Sat, 8 Sep 2018 15:29:31 +0000 (UTC) Date: Sat, 8 Sep 2018 17:29:28 +0200 From: Greg KH To: Andy Lutomirski Message-ID: <20180908152928.GA11120@kroah.com> References: <20180908082141.15d72684@coco.lan> <20180908113411.GA3111@kroah.com> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: Cc: Mauro Carvalho Chehab , ksummit-discuss@lists.linuxfoundation.org Subject: Re: [Ksummit-discuss] [MAINTAINERS SUMMIT] Handling of embargoed security issues List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , On Sat, Sep 08, 2018 at 07:20:00AM -0700, Andy Lutomirski wrote: > > > > On Sep 8, 2018, at 4:34 AM, Greg KH wrote: > > > >> On Sat, Sep 08, 2018 at 08:21:41AM -0300, Mauro Carvalho Chehab wrote: > >> IMHO, the best would be to have a formal/legal way to handle it. > > > > No, sorry, some of us are not allowed legally to sign NDAs for stuff > > like this. So keeping legal out of is it the best solution and we have > > done that pretty well so far. > > > > A lot us us (such as yours truly) have NDAs in place. I would love a > clear mechanism by which a vendor gives explicit permission for me to > communicate with other relevant parties. It doesn’t need to be fancy > and legalistic, but having it written down would be very, very nice. I agree, what we have now is a mis-match of different people working for different companies with different types of NDAs through different companies or not, trying to deal with different companies trying to work with us. Having something "simple" for us to work off of would be good, and this isn't the first thread that this topic has come up on. I know people want to solve this, and maybe the LF is the way to go here. There was a meeting last week at Harvard to start to consider how this could happen. Hopefully in a few months we will have something "solid" to discuss. thanks, greg k-h