full-disclosure - Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: measl at mfn.org (J.A. Terranson)
Subject: Reuters: Microsoft to give holes info to Uncle
	Sam first - responsible vendor notification may not be a good idea any
	more...

This "story" really just reflects what has been going on in the real world
for some time now.

Microsoft, Cisco, Juniper, etc., all have both vested interests and public
policy interests in notifying those who would be most affected first.
This is good public policy as well: if the national infrastructure is
compromised, we are all up shit's creek, if Joe's Corner Store is
compromised, only Joe and possibly Joe's small geographic user base is
hosed.

Decrying this shows you have not thought the problem through Tamas.

-- 
Yours,

J.A. Terranson
sysadmin@....org
0xBD4A95BF

"Quadriplegics think before they write stupid pointless
shit...because they have to type everything with their noses."

	http://www.tshirthell.com/