Re: Reuters: Microsoft to give holes info to Uncle Sam first - responsible vendor notification may not be a good idea any more...

[Devdas Bhagat <devdas () dvb homelinux org>]

On 12/03/05 15:36 -0600, J.A. Terranson wrote:
> On Sat, 12 Mar 2005, Devdas Bhagat wrote:
>
> > > Microsoft, Cisco, Juniper, etc., all have both vested interests and public
> > > policy interests in notifying those who would be most affected first.
> >
> > Which public? Are you a member of the public? Am I?
>
> The public at large.  You , me, everyone you know is "the public".
>
>
> > > This is good public policy as well: if the national infrastructure is
> > > compromised, we are all up shit's creek, if Joe's Corner Store is
> >
> > Which nation? From my PoV, it is the general user who needs to be
> > informed first. A whole bunch of us have more problems with Windows
> > holes even though we do not use Windows, simply because of the traffic
> > volume generated.
>
> Your "view" is perversely slanted towards serving only your own personal
> interests, without regard for those around you.
>
> As such, your "view" is worthless, and can be safely discarded.
My PoV is that the infrastructure that I depend on is being impacted by
J.R. User in the US, Korea and Japan because of the flood of crap that
comes from their infected Windows systems to mine. Hint: There is
network infrastructure outside the US.

Regardless of what you think critical infrastructure is, the US
government's PCs are /not/ critical infrastructure. 

Devdas Bhagat
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://www.secunia.com/