OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: [Full-disclosure] Right, or wrong?

From: Brian Eaton (eaton.listsgmail.com)
Date: Tue Aug 07 2007 - 22:14:31 CDT


On 8/7/07, Sol_Invictus <solhaveyoubeentested.org> wrote:
> My 2 cents? Anyone trying to sell a bug to the vendor with the problem is
> extortion. Feel free to sell it to others, but only AFTER giving the vendor
> a chance to fix it. If the vendor ignores you then that's what FD is all
> about... but please lets be responsible out there!

As far as some vendors are concerned, threatening full disclosure is
equivalent to extortion. I don't know what lawyers would think of
that definition.

- Brian

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/