RE: Announcing the Zero Day Initiative

["Walton, John Michael (John)" <jmwalton () avaya com>]

Dave-

What about the situation in which the researcher is offering information
on a 3com product vulnerability?  Does this mean 3com can't fix the
vulnerability without an offer acceptance (ransom) by the researcher
;-)?  Sorry, I just couldn't resist asking.

-John

> Dave wrote:
> Hi Evgeny,
>
> If an offer is not accepted by a researcher, 3Com and TippingPoint will
not share, leverage, or otherwise use the information in any sense of
the word.  The actual ZDI submission process involves a mutual NDA to
protect the researcher in this way.
> -dave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
https://lists.immunitysec.com/mailman/listinfo/dailydave