Re: recent disclosure debates

["Marcus J. Ranum" <mjr () ranum com>]

R. DuFresne wrote:
> I'm wondering why all the fingers are pointing so dramatically at ISS and
> why ISC has received little or no heat in the issue.

Probably because ISC wasn't marketing itself based on the
fact that its code was buggy, but ISS was marketing itself
based on the fact that it had found bugs in ISC's code.

As long as customers sit back and keep lapping up the whole
vulnerability-disclosure-as-marketing phenomenon, we'll keep
having to put up with it. I used to think that it'd wear
off but that was 5 years ago, already. I'd expected a
backlash of customer nausea long before now. I guess P.T. Barnum
was wrong: there's one born every _SECOND_.

mjr. 
---
Marcus J. Ranum                         http://www.ranum.com
Computer and Communications Security    mjr () ranum com

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards