Full Disclosure mailing list archives

Re: F-Secure to release XSS "potential dangers"


From: Valdis.Kletnieks () vt edu
Date: Wed, 26 Jul 2006 21:44:41 -0400

On Wed, 26 Jul 2006 19:06:11 -0000, n3td3v said:

This is highly irresponsible of F-Secure and they should be held
legally responsible if the information they release in relation to
their "Netscape hacked" blog entry is used maliciously.

You might want to review what you've posted to lists regarding vulnerabilities,
and ask yourself - if F-Secure gets held to some legal standard of liability.
where do you end up yourself?

I don't know who's going to end up the test case/poster child for vulnerability
liability - but it's much more likely to be an individual that posts to
this list and can't afford a lawyer than a corporation with deep pockets
like F-Secure....

Attachment: _bin
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: