Re: Things to do before vulnerability disclosure

[Giuseppe Fuggiano <giuseppe.fuggiano () gmail com>]

2009/6/18  <noloader () gmail com>:
> Yet more interesting reading on the subject. Rather than directly expose yourself to computer crime laws [1], sell 
> the information to a security bug broker [2].

Very interesting solution for a single researcher.  What does will do,
then, the security bug broker with my vulnerability?  How do they make
money from it?  This sounds like a (still interesting) workaround.  I
am going to read that page...

-- 
Giuseppe

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------