OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] How to Report a Security Vulnerability to Microsoft

From: Steve Friedl (steveunixwiz.net)
Date: Wed Apr 13 2005 - 12:57:12 CDT

On Wed, Apr 13, 2005 at 01:50:25PM -0400, bkfsec wrote:
> My point
> is that the the researcher making the disclosure should determine their
> timeline, but with obvious consideration of the vendor and users, but
> that that should be a reasonable approach, and not followed because the
> researcher is forced to follow it.

I agree completely: the vendor can have an opinion, but not a vote.

Steve

--
Stephen J Friedl | Security Consultant | UNIX Wizard | +1 714 544-6561
www.unixwiz.net | Tustin, Calif. USA | Microsoft MVP | steveunixwiz.net
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/