On 4/27/2009 5:47 PM, Theo Van Dinter wrote:
These days there is basically no rule development going on, it seems.
Justin's sought rules are the only ones really being updated, and
that's because they're computer generated. :)
That's actually something else I'm sad about -- we had such a huge
corpus of mail, I would really like to have seen something that took
advantage of it.
So anyway ... Yeah, IMO, if more people don't get involved, and
specifically to work on rule development, SA is going to completely
stagnate.
Theo,
For the same reasons, SARE lost interest.
One for sure, the process to submit rules is complicated and cumbersome,
unless you have a backdoor.
SARE had a nice system where you could submit a rule via email and got
the masscheck results via email. Sadly all the boxes which did this are
dead. I wonder if the SA masscheckers could be taught to do something
like that. It could possibly inspire ppl if they see fast results and
publishing of new 0 hour rules.
Axb
