[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Full-disclosure] How to Report a Security Vulnerability to Microsoft
- To: bkfsec <bkfsec@xxxxxxxxxxxxxxxx>
- Subject: Re: [Full-disclosure] How to Report a Security Vulnerability to Microsoft
- From: Steve Friedl <steve@xxxxxxxxxxx>
- Date: Wed, 13 Apr 2005 10:57:12 -0700
On Wed, Apr 13, 2005 at 01:50:25PM -0400, bkfsec wrote:
> My point
> is that the the researcher making the disclosure should determine their
> timeline, but with obvious consideration of the vendor and users, but
> that that should be a reasonable approach, and not followed because the
> researcher is forced to follow it.
I agree completely: the vendor can have an opinion, but not a vote.
Steve
--
Stephen J Friedl | Security Consultant | UNIX Wizard | +1 714 544-6561
www.unixwiz.net | Tustin, Calif. USA | Microsoft MVP | steve@xxxxxxxxxxx
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/