full-disclosure - Information Week: 2/3 of pros want immediate disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: coley at mitre.org (Steven M. Christey)
Subject: Information Week: 2/3 of pros want immediate disclosure

Information Week just posted an article titled "Disclosure: Security
Pros Want Flaw Information Sooner" in which they surveyed 7,000
business technogology and security professionals.  66% argued for
immediate disclosure upon discovery, and another 32% wanted disclosure
once a patch was available, leaving only 2% who said that there was no
need to disclose vulnerabilities at all:

  http://www.informationweek.com/story/showArticle.jhtml?articleID=22103495

- Steve