=)

It's interesting to note the good, hackers can actually perform by creating an exploit and releasing it publicly,

as opposed to someone who would invent it and simply exploit anything they can get their hands on. Be thankful you're not facing a full-blown worm....

Yes there's a downside, it means we have to upgrade our versions or patch. However, this means the growth of safer systems and a stronger Apache, which is a good thing.

Give them the kudos for being smart enough to code and invest the time in coding it, concentrate less on blame and more on fixing the fault.

You can debate the morality of releasing an exploit, but believe me, I'd always rather it be in the public domain than circulating hidden reaches of the 'net and used by only a few. Then it can be dissected, studied and patches implemented. And, as a matter of fact, keep security consultants in work.

As usual, those who do not patch do not go unpunished.

So get patching!

Thanks

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/493/13216#13216