Skip to content

Instantly share code, notes, and snippets.

@demoray
Created April 29, 2023 01:32
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save demoray/ca118b85edd9ac4ef3b0c9af85c64b4d to your computer and use it in GitHub Desktop.
Save demoray/ca118b85edd9ac4ef3b0c9af85c64b4d to your computer and use it in GitHub Desktop.
Response to a request to publish Technical Details

[To Redacted],

On the matter of your request for agreement not to pursue additional sanction if you were to publish the details of your communications to the Board and Corporate officers relating to your sanction, the relevant issues are these:

First, on the merits of the underlying matter, the SCA no longer does business with, nor has a relationship with, the now defunct company Members Only software, nor does the SCA maintain or operate any of its processing systems or member personally identifiable information on their systems. As such, the SCA is not aware of any current risk to its membership relating to the vulnerabilities in question as part of your sanction.

Second, the bulk of the SCA's rules and policies that might be relevant to your request are largely in place to codify and restrict the actions of its officers (at all levels), the corporate officers, and the Board, in order to protect and preserve the privacy of its membership. While the SCA does have rules against doxxing and similar forms of behavior, if I understand your request correctly, you are intending to disclose your own personal information, not someone else's. The SCA does not have a rule against its members disclosing their own personal information, unless doing so would also disclose the private information of another member in such a manner as to violate its rules and/or policies, or if doing so would otherwise constitute a violation of the SCA's rules and policies for some other reason.

In short, self-disclosure of your own personal information, under the circumstances you describe, would not constitute a violation of SCA rules or policy, and would not be subject to sanction. As you have noted in your request, however, this would not indemnify you from the commission of other rules infractions that may result.

We would also like to add, if you have additional information which may be relevant to your sanction, we invite you to follow the standard procedures to file an appeal and have it reviewed.

[REDACTED]

Chairman, SCA Board of Directors

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment