Re: Extreme Hacking

[Vanja Hrustic <vanja () siamrelay com>]

At 12:49 AM 7/6/99 -0500, Craig H. Rowland wrote:
> The recent disclosure of the eEye IIS 4 hole is a perfect example of
> litigation waiting to happen against a security company. There are plenty
> of details there that show the security company acted irresponsibly
> (didn't wait for patch, released full working code, encouraged it's use by
> developing variants, etc.). Personally, if my website was attacked using
> their code I'd sue their pants off, but that's just me. 

You would sue eEye, and ... you would kiss Microsoft, I presume?! Because
eEye is a 'bad boy', Microsoft must be the good one?

Microsoft gave you the bomb, and eEye explained how to activate it. Is it
the fault of Microsoft to give you the bomb, or eEye to explain how to
activate?

Go figure... I know the answer for myself. That's why I don't use IIS...

Vanja