nanog mailing list archives

Re: Reasons why BIND isn't being upgraded


From: Patrick Greenwell <patrick () cybernothing org>
Date: Sat, 3 Feb 2001 11:38:56 -0800 (PST)


On 3 Feb 2001, Paul Vixie wrote:


patrick () cybernothing org (Patrick Greenwell) writes:

hiding it DOES however make it harder for people (including network owners)
to do surveys.

By the same token one might argue that atempting to hide vunerabilities 
to those paying you for "early warnings" doesn't help at all.

Wrt the bind-members forum being discussed to death elsewhere, nobody can pay
for early warnings.  CERT will still be the source of early earnings.  

CERT has NEVER been the source of early warnings. By the time they release
information it has already been dissimenated in a variety of other forums. 

Can you understand that?



Current thread: