Re: Product review postings (was Administrivia)

From: Gwendolynn ferch Elydyr (gwen@reptiles.org)
Date: Tue Jul 08 2003 - 14:49:11 EDT


On Tue, 8 Jul 2003, Alfred Huger wrote:
> >>(although I imagine setting criteria will be
> > > thorny) but I still am leery about purely anonymous posters.
>
> > Why? You see and moderate every post before it gets to the list, and
> have
> > the option to refuse posts, or request that a post be rephrased before
> > allowing it on the list.
> >
> How does that address accountability?

You've stated that your concern is about the content of posts being
inappropriate or damaging, and thus wanting accountability. If you
are moderating postings, than I'd expect you to drop postings that
are clearly inappropriate or obviously damaging.

Beyond that, if a vendor is sufficiently concerned about a given
posting, I'd suggest that they respond (as regularly happens) to
the posting with calm, factual information.

I'm still curious about how you intend to determine what addresses
are valid and accountable. Would a post from "Fook Yoo" be allowed? If
it was fyoo@hotmail.com, Fook_Yoo@aw.com ?

> Hahhaha, ok. If I were being uncharitable I would say you have an over
> inflated sense of your own entertainment value and a persecution complex.

Wooo! The song and dance will be on the News at 11! (from a secret
location, just in case ;>)

> Please point out to me one single instance of a *security* vendor suing
> anyone (individual or otherwise) for a bad review.

Let me point you to:

        http://www.chillingeffects.org/johndoe/

and for an interesting look at all aspects of the discussion:

        http://www.ojr.org/ojr/law/1015015204.php

> Please do not confuse this with Full Disclosure of vulnerabilities and
> criticism of products. The two issues are wholey separate and I am
> guessing you actually do understand the distinction. I have no problem
> with critical information being posted so long as the poster is
> accountable for his or her statements.

...and I'd ask again, "accountable"? Does that mean 'has an established
identity online', 'posts from a recognizable domain', 'has what looks
like a real name', 'has provided drivers licence and credit card as a
part of list subscription' ?

...or does it just mean "We can find you and sue you"?

> > There's a difference between polite frank and open discussion, and
> > newspeak.
> I'm afraid you've got me there what is newspeak?

It's the language that the government expects all party members to speak
in Orwell's 1984. It's an interesting read - I recommend it.

cheers!
==========================================================================
"A cat spends her life conflicted between a deep, passionate and profound
desire for fish and an equally deep, passionate and profound desire to
avoid getting wet. This is the defining metaphor of my life right now."

---------------------------------------------------------------------------
The Lightning Console aggregates IDS events, correlates them with
vulnerability info, reduces false positives with the click of a button, anddistributes this information to hundreds of users.

Visit Tenable Network Security at http://www.tenablesecurity.com to learn
more.
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:35 EDT