RE: procedure for penalizing or revoking CNA status?

["Christey, Steven M." <coley@mitre.org>]

The message below, quoted in its entirety, has now been publicly archived at:

   cve.mitre.org/data/board/archives/2015-08/msg00002.html

- Steve

> -----Original Message-----
> From: jericho [mailto:jericho@attrition.org]
> Sent: Saturday, August 29, 2015 2:08 AM
> To: Christey, Steven M. <coley@mitre.org>
> Cc: cve-editorial-board-list <cve-editorial-board-list@lists.mitre.org>
> Subject: Re: procedure for penalizing or revoking CNA status?
> Importance: High
> 
> 
> The entire time writing this, was trying to find an article to justify a
> single sentence. After Tweeting to the news outlet and baiting them, they
> dug up the articles that weren't available via search, or the mobile app
> even 12 hours later.
> 
> On Sat, 29 Aug 2015, jericho wrote:
> 
> : Are you guys fucking daft? YOU CONTROL CVE. You are the overlords of this
> : failing effort. You are considered the industry standard on this. Wo(man)
> 
> http://www.theregister.co.uk/2015/08/28/security_vulns_collective_noun/?mt
> =1440828281946
> 
> Please, read this article because it is amusing, and the finale of a
> series. But, take note:
> 
> Bugnote
> * CVE stands for Common Vulnerabilities and Exposures, the industry-wide
> system for uniquely identifying security bugs.
> 
> .b
> 
> http://www.theregister.co.uk/2015/08/20/android_multitasking_flaw/
> http://www.theregister.co.uk/2015/08/21/collective_noun_security_vulns/