As a Security person I find the attitude shown by the article a little strange.

Surely it is better to advise people of the potential for a systems compromise, than to keep it quiet, tell them a month down the line, only for them to find that they have been hacked????

As to some of the comments posted, about ISS being in it for commercial gains, hold on a minute. They are a growing business and isn;t commercial gain what business is all about. If not why are us security people protecting it so companies do not loose money and your salary.

I agree some of their products may be a bit long in the tooth IS & SS but they are continually evolving and other commerical solutions are in the same boat.

Regards,

A security bod.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/91/13333#13333