OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: [Full-disclosure] Our Industry Is Seriously Ethics Impaired

From: Christoph Gruber (grisuguru.at)
Date: Thu Jul 28 2005 - 02:35:06 CDT


Am Mittwoch, 27. Juli 2005 15:15 schrieb Adam Jones:
> What exactly is wrong with this?

Lokk at this:
http://www.red-database-security.com/advisory/published_alerts.html
Alex informed Oracle immediatly of all vulns, and they did nothing.
Me, as a security personal have to think that I am the only one in the world,
who doesnt know about a vulnerabilty.

> I personally would rather have 3com
> buying up exploits (probably under an agreement for exclusive access)
> instead of having them sold to the highest, probably malicious,
> bidder.

You trust 3Com? Me Not.

> Even if someone sells it to both there is a more reputable
> group that has the exploit and can help with mitigation.

What makes you shure, that noone else finds it?

--
Grisu
2B OR (NOT (2B)) = FF
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/