Looking at peoples' attitudes, I don't think these kind of companies can get it right. Either they're accused of releasing vulnerability information too early and screwing the vendor (FVO "vendor" != Microsoft) or then they're accused of shady deals to keep security information hidden from the end-users and only passing it to those with big-$$$. It's like some people automatically hate anyone who tries to make a living out of information security vulnerabilities.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/91/13301#13301