Nicole Schwartz "AmazonV" "CircuitSwan"
Nicole Schwartz "AmazonV" "CircuitSwan"
@blacklistisnotracist - A few months ago, an NCSC customer contacted me to ask if we would consider making a small but significant change to some of the wording we use...
@blacklistisnotracist a, i watched the video b, i am native american c. yes if my product used terminology or coloring which discouraged a group of people from using it (for...
Our terminology is based upon the behavior/functionality of the code - a whitelist is a list of items that are allowed. A blacklist is a list of items that are...
@blacklistisnotracist avoiding the strawman arguments 1. reskin is actually considered offensive and is trying to be removed, so in instances where people have taken offense some action is being taken,...
Hey - do we define user-build script anywhere?
A similar issue came up in today's meeting about guidance on data reporting (data loss, data breach)
There was concern expressed in the lack of search-ability/SEO for straight code documents in repositories in last weeks' meeting This issue is for people with opinions to share if there...
And to note boundaries were brought up in the safe harbor discussion and some (not all) policies seem to reference so it seems a good diea to include in ours...
This is published on the website, but is this yet in the source control?
As per meeting May 1 Existing safe harbors in thread https://www.usda.gov/vulnerability-disclosure-policy https://github.com/disclose/policymaker/tree/main/static/templates https://github.com/disclose/policymaker/blob/main/static/templates/disclose-io-safe-harbor/en-US.md Additional Safe Harbors https://docs.bugcrowd.com/researchers/reporting-managing-submissions/disclosure/disclose-io-and-safe-harbor/ [more we could look at those using bug crowd and their safe harbors]...