Full Disclosure mailing list archives

RE: Multiple Backdoors found in eEye Products (IRISand SecureIIS)


From: Paul Schmehl <pauls () utdallas edu>
Date: Sat, 01 Jan 2005 14:18:47 -0600

--On Thursday, December 30, 2004 9:36 AM +0000 Barrie Dempster <barrie () reboot-robot net> wrote:

I'd have to agree with the eEye statement on this one. You sent out an
advisory without disclosing the details, which offers no real benefit to
anyone. Many people consider this responsible disclosure but that also
requires you to notify the vendor (there were no @eeye.com's in your
"to" list but there were a couple of press mailboxes).

Your entire post could be classified as casting perls before swine.

Paul Schmehl (pauls () utdallas edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: