full-disclosure - Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: measl at mfn.org (J.A. Terranson)
Subject: Reuters: Microsoft to give holes info to Uncle
	Sam first - responsible vendor notification may not be a good idea any
	more...


On Sat, 12 Mar 2005, Devdas Bhagat wrote:

> > Microsoft, Cisco, Juniper, etc., all have both vested interests and public
> > policy interests in notifying those who would be most affected first.
>
> Which public? Are you a member of the public? Am I?

The public at large.  You , me, everyone you know is "the public".


> > This is good public policy as well: if the national infrastructure is
> > compromised, we are all up shit's creek, if Joe's Corner Store is
>
> Which nation? From my PoV, it is the general user who needs to be
> informed first. A whole bunch of us have more problems with Windows
> holes even though we do not use Windows, simply because of the traffic
> volume generated.

Your "view" is perversely slanted towards serving only your own personal
interests, without regard for those around you.

As such, your "view" is worthless, and can be safely discarded.


-- 
Yours,

J.A. Terranson
sysadmin@....org
0xBD4A95BF

"Quadriplegics think before they write stupid pointless
shit...because they have to type everything with their noses."

	http://www.tshirthell.com/