Agreed.

Bitter-taste is:

When one discovers a flaw after hours/days of research (besides years of knowledge to do that), sends it to respective sw-house/company and don't get any reward for this *world-wide comunity service* besides a slap-in-the-back like a candy to a kid.

But much worse than that, is when that flaw is not (deliberatly?) fixed for months (and sometimes years).

Now, this not only gives one a bitter-taste, but also a fear-taste and a dumb-taste. Something like: "oops talked too much?".

This definetly must end. And one way to do this is by *hard work rewarding* and public information of this transaction (and awareness of the vendors acknowledgement).

rusga

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11364/32892#32892