Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

In practice, "organization" usually means your company or business. "The community" usually means an Information Sharing and Analysis Center (ISAC) aka a group of similar orgs that share information with each other; think financial services companies in the US, or energy companies in Japan.


Okay, maybe I'm just not the target audience for this. I didn't know what an ISAC was, but I've seen plenty of TLP markers on open source disclosures where it was exceedingly unclear what a "community" meant w/r/t appropriate sharing.


If you see something publicly it's TLP:White (or clear, since it was changed for weird readons) by definition. But yeah it's a term specific to it security, where it's usually well understood what TLP:Amber and TLP:Red means. I agree TLP:Green is a bit more fuzzy, and the intention is often basically "share with trusted parties but don't post publicly".


You know what an ISAC is. It's a meetup of beardy mid-level security managers from huge companies.


I'll save myself some embarrassment and say that I just didn't know that ISAC was the collective noun for that :-)


Yeah, in the cybersecurity space it's a lot more prevalent. TLP:CLEAR, if you will.


He's a security practitioner.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: