Full Disclosure mailing list archives
Re: Valid disclosure analogy
From: full-disclosure () lists netsys com (Isaak Bloodlore)
Date: Sun, 25 Aug 2002 13:20:26 -0700
On Sunday, Aug 25, 2002, at 12:05 US/Pacific, hellNbak wrote:
What ever happened to get your money out of Bank A and inform all of Bank A's other customers via a public forum (media) in order to protect the general public from being abused by Bank A and their lack of security/process/whatever.......??? Sure, change banks, but I think there is a greater responsibility here as well.
What Defender Defender (what a name) fails to mention is, that if a bank misrepresents the security of its money and an accountant (affiliated or not) stumbles across this misrepresentation he IS required to report it. In the case of software vulnerabilities, we encounter a huge number of situations in which the bank ("software vendor") knowingly misrepresents ("unbreakable") the security of assets stored within. Defender Defender (still amused) tries to liken the freedom to talk about mishandling of information or money in the bank with an actual break in, theft and destruction. This is an easy way to argue, especially if the intention is to criminalize the other party. Under quite similar circumstances Godwin's Law would prevent him from doing so. What Defender Defender fails to mention is the fact that disclosure does not happen "because vendors have been soooo diligent in the past" but because they have not.
Current thread:
- Valid disclosure analogy Defender Defender (Aug 24)
- <Possible follow-ups>
- Re: Valid disclosure analogy pooh pooh (Aug 25)
- Re: Valid disclosure analogy hellNbak (Aug 25)
- Re: Valid disclosure analogy Isaak Bloodlore (Aug 25)
- Re: Valid disclosure analogy hellNbak (Aug 25)
- Re: Valid disclosure analogy Defender Defender (Aug 25)
- Re: Valid disclosure analogy pooh pooh (Aug 25)
- Re: Valid disclosure analogy Defender Defender (Aug 25)
- Re: Valid disclosure analogy Defender Defender (Aug 25)
- Re: Valid disclosure analogy Defender Defender (Aug 25)
- Re: Valid disclosure analogy Defender Defender (Aug 25)
- Re: Valid disclosure analogy pooh pooh (Aug 25)
- Re: Valid disclosure analogy Defender Defender (Aug 25)
- Re: Valid disclosure analogy pooh pooh (Aug 26)
- Re: Valid disclosure analogy Defender Defender (Aug 26)