Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista
Microsoft Reveals Anti-Disclosure Plan
Kevin Poulsen, SecurityFocus 2001-11-09

Five computer security firms join Microsoft to set an official standard for limiting disclosure of software security holes

Comments Mode:
Microsoft Reveals Anti-Disclosure Plan 2001-11-09
Anonymous (1 replies)
Microsoft Reveals Anti-Disclosure Plan 2001-11-10
Gregarious Monk
What about the admins? 2001-11-09
ferretzero
Microsoft Reveals Anti-Disclosure Plan 2001-11-09
russell handorf
Microsoft Reveals Anti-Disclosure Plan 2001-11-09
Angus Blitter
30 days makes no difference 2001-11-09
Anonymous
Microsoft Reveals Anti-Disclosure Plan 2001-11-09
kishg (at) optonline (dot) com [email concealed]
Shocking developments 2001-11-09
H Carvey <keydet89 (at) yahoo (dot) com [email concealed]> (2 replies)
Shocking developments 2001-11-09
Anonymous
Shocking developments 2001-11-09
Greggory Peck
Download Utilities now, while you can 2001-11-09
anonymous
Though a previous poster is correct in stating that

these companies haven't released an advisory in some time,these companies or their employees host sites which offer auditing utilities. The only way these companies can ensure that their utilities and those of their employees are used for "good" purposes is to severely restrict access to them.

Among the sites which may be influenced by this are

nmrc.org, packetfactory.net, phrack, etc. These are sites maintained by employees of the companies involved with Microsoft. If you use these utilities in the performance of your job, I suggest you download and stockpile them immediately.

Unfortunately, information and utilities from these sites may need to be considered untrusted in the future.

There is no way for us to verify whether the employee's integrity has been breached by the company they work for or if they have been "reached" by Microsoft.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/281/8679#8679
Be careful what you wish for. 2001-11-09
Surreal
Such a policy for disclosure already exists 2001-11-09
Dumky (1 replies)
Such a policy for disclosure already exists 2001-11-10
H Carvey <keydet89 (at) yahoo (dot) com [email concealed]>
...on second thought...Kudos! 2001-11-09
H Carvey <keydet89 (at) yahoo (dot) com [email concealed]> (1 replies)
RE: ...on second thought...Kudos! 2001-11-10
Gregarious Monk
RFP (Rain Forest Puppy) 2001-11-10
Anonymous
Read the fine print 2001-11-11
Anonymous
Cross your fingers... 2001-11-11
Anonymous
Full disclosure will survive 2001-11-11
Ben - Canberra AUS
So, green light to sue? 2001-11-12
Anonymous
Microsoft have no server monopoly: this may reduce their share 2001-11-12
Kirsten Bayes (kirruth@hushmail)







 

Privacy Statement
Copyright 2007, SecurityFocus