3 ms·

tptaceck?

• tptacek 16y ago
  Yeah, this mail is a big deal. Lots of people talking about it. I like lcamtuf's take on it best: http://lcamtuf.blogspot.com/2010/06/not-disclosure-debate-again.html http://lcamtuf.blogspot.com/2010/06/not-disclosure-debate-ag...
  • alecco 16y ago
    Yup. > Nobody in this debate is particularly forthcoming (Spengler > included, as much as I enjoyed his post), and no solution > is perfect. Only one of these groups has PR departments, though. Also Spanglers response on the comments is important: > I commented specifically on the 'de-evolution' of "responsible > disclosure" into something where it's deemed irresponsible > if a researcher doesn't allow a vendor to sit on a vulnerability > for as long as they feel like.