I think you all missed the point. This is a civil matter i.e. slander. It?s the same as taking client lists from a former law firm and disclosing their dirty laundry in an attempt to hurt their image. Typically, monetary compensation would have been awarded. This particular interpretation of federal law is wrong and will probably be reversed upon appeal. At least I hope so. If not, lookout bug lists. If I find anybody publishing information about vulnerabilities in my code without prior written authorization, I too will blaze a path to the local prosecutors office. Oh, BTW this should also apply to news and media outlets as well. So, SF should be perused under the same interpretation of the law. How many zero day sploits been published on their lists by intention or accident.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/179/21641#21641