Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
The value of vulnerabilities
Jason Miller, 2006-03-07

There is value in finding vulnerabilities. Yet many people believe that a vulnerability doesn't exist until it is disclosed to the public. We know that vulnerabilities need to be disclosed, but what role do vendors have to make these issues public?

Submit Comment Mode:
Name:
Subject:
Message:
 
  Enter the characters that appear above
 
Re: The value of vulnerabilities 2006-03-14
Robert E. Lee
> basically what i'm saying is, add a couple extra steps to notify the users and the public about the problem before you publish code and allow users that have no idea there is a vulnerability, to get owned.

Without the exploit the end-user can not test their systems for susceptibility to the vul...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus