This week, I've read a lot of out-of-control FUD on the web about this WMF vulnerability. This is, hands down, the worst piece of tech journalism I have ever seen.

Contrary to popular opinion, millions aren't compromised, because a good majority of non-critical assets had nobody sitting at them over the holiday season. Further, how many people are going to run and click now with as much media reporting as has been done on the issue.

Aside from a shameless plug for BugTraq disguised in a call-to-action to readers, I see nothing of any substance or accuracy in your discussion of the WMF zero-day. I, for one, would prefer *NOT* to see your readers solely use a heavily-moderated list like BugTraq to communicate viable workarounds. I'd prefer they go to unmoderated lists, where the information is distributed immediately, rather than to a list like BugTraq where the keys are held by a corporation that advocates this kind of fear-mongering.

Next time, Kelly, you might want to stick to the script.

I don't normally assail paranoia in this fashion, even if it is delusional... but *MILLIONS*?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/377/32883#32883