Full Disclosure mailing list archives

Re: Microsoft Cries Wolf ( again )


From: "morning_wood" <se_cur_ity () hotmail com>
Date: Mon, 30 Jun 2003 16:08:47 -0700

If you're going to take the interpretation of full
disclosure literally, notification of the vendor and the public is
simultaneous.

 this was my point, they are complaining about simultaneous
disclosure.
regardless if the exploit is feasable was not my concern, but the
reaction to "Full Disclosure"
they are on the OIS team??? ...  but uhh  "The software maker wasn't
pleased with the premature revelation of the vulnerability before its
security teams got a chance to look into the matter"

... i say again, too bad billy

morning_wood
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: