Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
Re: [Full-disclosure] How to Report a Security Vulnerability to Microsoft
From: Steve Friedl (steveunixwiz.net)
Date: Wed Apr 13 2005 - 12:57:12 CDT
On Wed, Apr 13, 2005 at 01:50:25PM -0400, bkfsec wrote:
> My point
> is that the the researcher making the disclosure should determine their
> timeline, but with obvious consideration of the vendor and users, but
> that that should be a reasonable approach, and not followed because the
> researcher is forced to follow it.
I agree completely: the vendor can have an opinion, but not a vote.
Stephen J Friedl | Security Consultant | UNIX Wizard | +1 714 544-6561
www.unixwiz.net | Tustin, Calif. USA | Microsoft MVP | steveunixwiz.net
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/