, 2006-03-07
There is value in finding vulnerabilities. Yet many people believe that a vulnerability doesn't exist until it is disclosed to the public. We know that vulnerabilities need to be disclosed, but what role do vendors have to make these issues public?
Expand all |
Post comment
The value of vulnerabilities
2006-03-08
Omar A. Herrera (2 replies)
Omar A. Herrera (2 replies)
Re:Good Points
2006-03-08
R_U_Trustified (2 replies)
R_U_Trustified (2 replies)
Re: Re:Good Points
2006-03-09
Matthew Murphy (1 replies)
Matthew Murphy (1 replies)
Re: Re: Re:Good Points
2006-03-14
Robert E. Lee (1 replies)
Robert E. Lee (1 replies)
With remote vulns that are truely exploitable becoming fewer, these companies that relied on vulns to fuel their businuess model are having to buy them where before they could harvest them off of bugtraq for free. They are forced to lower what they pass off as 'remote code execution' to their customers. For example, if Idefense can place any value in memory or a register that suffices as 'remote code execution'.
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/391/33331#33331