full-disclosure - Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20050313015718.D5084@ubzr.zsa.bet>
From: measl at mfn.org (J.A. Terranson)
Subject: Reuters: Microsoft to give holes info to Uncle
	Sam first - responsible vendor notification may not be a good idea any
	more... 

On Sun, 13 Mar 2005 Valdis.Kletnieks@...edu wrote:

> If you have critical infrastructure out on a secretary's desk, you're doing
> something *very* wrong....

The problem here is that "government" is not a bunch of smaller units that
can be selectively given pre-material.  "Government" is a huge morass of
systems, many of which are critical, and many more of which talk to
something critical by dint of being owned by this entity "government".
Because any "government" issue is likely to cascade, all government is, by
definition, critical.

-- 
Yours,

J.A. Terranson
sysadmin@....org
0xBD4A95BF

"Quadriplegics think before they write stupid pointless
shit...because they have to type everything with their noses."

	http://www.tshirthell.com/