Full Disclosure mailing list archives
Re: To anybody who's offended by my disclosure policy
From: kf_lists <kf_lists () secnetops com>
Date: Fri, 26 Nov 2004 22:26:07 -0500
Berend-Jan Wever wrote:
Not only that ... some of the vendors even try to make you pay for a support contract before you can report a security vulnerability. As a researcher I can certainly understand his frustration with trying to report a bug... sometimes it just gets to ya and you just don't give a flying whoot.My disclosure policy:Most vendors treat "hackers" like free beta-testers that they can put the blame on when publicity goes bad.
Vendors want the researchers to be the scape goat when a vulnerability is found... standard procedure is: 1. Brush under the rug. 2. Try to make the researcher look like a horrible person. 3. Downplay the vulnerability.
Stop trying to kill the messenger. Start holding your vendors accountable! Give guys like Skylined a break... hes doing you a favor.
GOBBLE, GOBBLE. Happy Turkey Day! -KF _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- FIREFOX flaws: nested array sort() loop Stack overflow exception Berend-Jan Wever (Nov 25)
- More Browser flaws on MACOSX: nested array sort() loop Stack overflow exception Marco Mella (Nov 25)
- Re: FIREFOX flaws: nested array sort() loop Stack overflow exception James Tait (Nov 25)
- Re: FIREFOX flaws: nested array sort() loop Stack overflow exception Gadi Evron (Nov 25)
- To anybody who's offended by my disclosure policy Berend-Jan Wever (Nov 25)
- Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 25)
- Re: To anybody who's offended by my disclosure policy kf_lists (Nov 27)
- Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 27)
- Re: To anybody who's offended by my disclosure policy kf_lists (Nov 27)
- Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 27)
- Re: To anybody who's offended by my disclosure policy JxT (Nov 27)
- Re: To anybody who's offended by my disclosure policy Gadi Evron (Nov 27)
- To anybody who's offended by my disclosure policy Berend-Jan Wever (Nov 25)
- MSIE & FIREFOX flaws: "detailed" advisory and comments that you probably don't want to read anyway Berend-Jan Wever (Nov 26)
- Re: FIREFOX flaws: nested array sort() loop Stack overflow exception Jose Nazario (Nov 27)