Re: TippingPoint's 'Zero-Day Initiative' to Publish Unpatched Flaws

[Josh Bressers <josh () bress net>]

> I did the same thing with vulnerabilities I found before I came to 
> TippingPoint, and others (notably eEye) also engage in this practice. 
> Calling it extortion is completely out of line, IMO.

What does this practice accomplish though?  As an outsider it seems that
the goal here is to frighten people into purchasing your service lest they
be compromised.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.