I haven't seen security reports as clear as gobbles in quite some time, with the commercialization of the security industry it seems to have scared many to do so. I think anyone trying to hide these kind of holes in software instead of informing the public about them is too ignorant to be any part of computer security or computer systems work in general. Basically would you rather have this hole still unknown by 'you' but known as it has been for quite a while by 'who knows who', I think resolving a problem is the best approach in most situations instead of running from it.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/493/13162#13162