[gen-14164] Invitation to the CERT Vendor Meeting 2022

[cert+donotreply--- via Gcc]

We invite you to join us for the CERT Vendor Meeting 2022. This will be a 
virtual event, 2022-02-07 10:00-14:30 EST, via Zoom Webinar.

We'll be discussing two topics in some depth, using an extended panel format 
(short presentations, moderated discussion, open discussion).

Topic 1: Log4j, a multi-party coordinated vulnerability disclosure failure?

Topic 2: There's no such thing as free software, or, how to invest in OSS 
security.

Registration: 

Questions: 




This e-mail was sent to you as a user of our VINCE service, in accordance with 
our privacy policy. Please advise us if you believe you have received this 
e-mail in error.

[gen-16862] Invitation to the CERT Vendor Meeting 2022 (June 6)

[cert+donotreply--- via Gcc]

While it's unusual for us to hold meetings so close together, it's been an 
unusual couple of years, and we are holding a full day, hybrid event on June 6 
2022, the Monday of RSAC 2022. The meeting will be held from 9 AM to 5 PM PDT, 
in person at the Marriott Marquis in San Francisco, CA, US, and online via Zoom 
Webinar.

Register here: 

Registration options include in-person, virtual, or both.

Questions/issues about registration, logistics, etc: 

Topical discussion: 

We actively seek ideas for topics that are of interest to you, and we welcome 
those wishing to speak or lead a discussion topic or participate on a panel. 
The draft/working list topics includes:

 * UEFI vulnerability analysis

 * Linux Vendor Firmware Service (LVFS), possibly connected to the UEFI topic, 
probably also with supply chain/SBOM implications

 * A CVD protocol

 * CVE

 * SBOM, VEX

 * Government regulations impacting CVD

While we're more or less happy to decide the agenda ourselves, we'd be happier 
with your input, and you might be too.

Regards,

 - Art




This e-mail was sent to you as a user of our VINCE service, in accordance with 
our privacy policy. Please advise us if you believe you have received this 
e-mail in error.