It seems to me that those who would try to ban the dissemination of vulnerability information are like the clerics of the renaissence who tried to suppress scientific discovery if it conflicted with their world view. Although they succeeded in silencing a few scientists, it was a lost battle, because nature was available for all to observe. Similarly those who would clamp down on information should not delude themselves that only the experts can find security bugs. A culture of suppression will only make the information go underground, but still available to miscreants, and nobody is any safer.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/270/8300#8300