Vulnerability Development mailing list archives

RE: Complicated Disclosure Scenario


From: Jose Nazario <jose () biocserver BIOC cwru edu>
Date: Thu, 17 Jan 2002 16:49:41 -0500 (EST)

On Thu, 17 Jan 2002, Dom De Vitto wrote:

Ethics indicates that in order to protect users, public disclosure
(full or limited) is the only remaining way to protect users - either
because the don't use the product, or because the vendor fixes it due
to public pressure.

if you wanna feel better about it, include some workarounds for people to
use it a bit safer, or supply, if possible, an alternative. then you have
more than adequately covered your bases.

____________________________
jose nazario                                                 jose () cwru edu
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)


Current thread: