RE: MSIE (mshtml.dll) OBJECT tag vulnerability

[Michal Zalewski <lcamtuf () dione ids pl>]

On Wed, 26 Apr 2006 bruen () coldrain net wrote:

> There aren't people out there looking to exploit the flaws in your car in
> order to drive it where they want it to go. It's a lousy analogy.

Larry,

Microsoft Internet Explorer is not a car. Were it a car, it still wouldn't
be yours more than it would be mine. "Disclosing a problem to the public"
is not "driving it off".

Depending on whether I compare finding vulnerabilities to nursing an
orphaned baby squirrel, or running over the elderly, I can appeal to
different emotions of the public. But that does not mean anything, and you
know this.

So, do tell, why are informed, computer-savvy people so desperate to make
inadequate, half-baked analogies to real life to "prove" their opinions?

/mz

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/