But in this change there is no value added to list subscribers. This development comes on the heels of a dispute with Microsoft which told BugTraq that MS security advisories may not be reproduced in whole on the list, citing copyright issues, as we reported here . I've asked the list subscribers for their opinions. I've received over five-hundred messages to far. While a handful of people liked the notices, the large majority of them, probably around 95 per cent, found the change to be a negative one and want me to hold firm to the policy of not approving them.
People can always reference our work and make fair use of it.
We do not wish to stop anyone from learning from it or using it to better secure their computing resources or build better security products. This is of course the primary reason we publish our research and make it freely available for all to read. But referencing the work is not the same as reproducing it. A recent story by ZD-Net may have added fuel to a fire that doesn't quite exist. I would not call it a feud.