Re: TippingPoint's 'Zero-Day Initiative' to Publish Unpatched Flaws

["Dude VanWinkle" <dudevanwinkle () gmail com>]

On 8/28/06, Michal Zalewski <lcamtuf () dione ids pl> wrote:
> On Mon, 28 Aug 2006, Dude VanWinkle wrote:
>
> > "Tipping Point customers have been protected from this flaw since x.y.z"
> > Is that extortion?
>
> No. Sorry.

I guess it depends on the vendor and how long they have given them to
patch the issue.

Still FD of 30 0-days seems odd for a security company that will profit off it.

Que Sirah

-JP
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.