Seeking comment on disclosure articles

[Shawna McAlearney <SMcAlearney () cxo com>]

Vulnerability Disclosure: Where Do You Stand?
If you see a glaring security hole in a sensitive application, what will 
you do? Will you notify the developer? The users? Other hackers? Sometimes 
it's best not to be the good Samaritan. Read about "The Chilling Effect" 
and also find out why Bruce Schneier thinks full and open disclosure is a 
"damned good idea" while Marcus Ranum says disclosure of vulnerabilities 
is a marketing ploy by vendors that was never really designed to further 
security and has only succeeded in fostering a "grey-market economy in 
exploits." Do you think disclosure only aids attackers?
http://www2.csoonline.com/exclusives/column.html?CID=28088

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/