RE: Lap Dances for All

[Chris Wysopal <weld () vulnwatch org>]

On Thu, 3 Mar 2005 surreal () delusory org wrote:

> Does the NDA, or anything other than pride, prevent Microsoft from
> joining the VSC and addressing these "tactical nukes" as they're
> deployed? If so, it would be magnanimous to offer MS a special license
> at a reasonable price ($300K too cheap?) that would allow them to share
> the vulnerabilities internally and address them.

I imagine that Microsoft doesn't want to join a VSC to get vulnerability
information as that would set a precedent with the ultimate result being
200 VSCs, each with one researcher contributing and charging ever higher
membership fees.

-Chris
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave