Does anyone see the irony of a firm that teaches people how to hack and another firm that wrote perhaps the most well known hacker tool ever (l0phtcrack) not supporting full disclosure? Seems to me, if I dont hire one of these firms then I have no way of being up to date on the latest vuls in a timely fashion. Also seems to me that this will reduce the incentive for MS and other vednors to fix vuls quickly. This all stinks of a secret club, and if you're not in it, you dont get the information. All this does is make anyone who is not a client of these firms unnecessarily vulnerable to attack. Full disclosure is the only way to force vendors to make fixes quickly, and to protect the rest of us

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/281/8689#8689