He did notifiy Cisco in MArch. and then in May informed them that he was preparing a brief for Black Hat in July. march - July 5 months for Cisco to aknowledge / fix, and do damage controll. Plus this is not his first presentation nor gig sharing vulnerabilities with vendoers and End-users. this was something he felt morally responsible to address before it became / becomes a major network flaw (remeber he mention several bits of code came from china sites, if you think our counterparts are preparing cyber arsenals your a fool.

as too leveraging for bigger bucks. I know he gave up a serious 6 figure Salary to do his presententation. some people do things for other than glory and dollars ((P.S. Black hat 90% government and major corporations Defcon 90% scriptkidddies and others )

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11260/32249#32249