Full Disclosure mailing list archives

Re: HP Full Disclosure Story


From: full-disclosure () lists netsys com (Defender Defender)
Date: Sat, 24 Aug 2002 22:20:39 +0000

Once again, another person who fails to grasp simple concepts such as 'clear 
and present danger', and link between disclosure and threat.

This is that ignorance that make you and mr. guninski dangerous people to 
society.

Quoting Georgi Guninski (guninski () guninski com):

Just take a look at real world.
When you buy a beer or a car and then find a bug in it, you may disclose 
the bug as you wish. (As bonus, both beer and cars come with warranties, 
unlike warez).

This analogy can be made even further. If a mother finds a flaw with
one of her toddlers toys which could potentially make it swallow parts
of it, notifies the vendor and he shrugs it off or fails to recall the
toy, he's in deep legal trouble. If the mother goes to the press,
knowing the vendor WILL shrug it off and potentially endanger
unsuspecting customers, she's a hero and the vendor will get public
and judicative heat.

I can not imagine the public outcry if said vendor would threaten or
even sue the mother, for demonstrating the flaw. Simple fact is, that
it has not made it into the brains of public servants, that a software
flaw CAN potentially endanger millions of people - and the vendors do
a great job of keeping it that way.




_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com



Current thread: