Full Disclosure mailing list archives

Re: To disclose or not to disclose


From: Pavel Kankovsky <peak () argo troja mff cuni cz>
Date: Sun, 28 Sep 2008 12:54:38 +0200 (CEST)

On Fri, 26 Sep 2008, Simon Smith wrote:

      What should the security company do?

Make a list of users of the vulnerable technology, sell a pentest of that
technology to as many of them as possible and reuse your knowledge of the
vulnerability to make a lot of money with little effort.

-- 
Pavel Kankovsky aka Peak                          / Jeremiah 9:21        \
"For death is come up into our MS Windows(tm)..." \ 21th century edition /

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: