At the same level, companies who release advisories to gain personal/financial profit from it, endangering the community and then making lukewarm statements, should be shut down, too. At least Gobbles does not make dough with their advisories, ISS makes lots of money by selling inferior software patched together from other sources and by pulling stunts like the Apache advisory.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/493/13231#13231