| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Hackers, software companies feud over disclosure of weaknesses | |
|
||
| Time: 09:41 EST/14:41 GMT | News Source: Seattle Times | Posted By: Robert Stein | ||
|
As Muhammad Faisal Rauf Danka recalls it, he tried 10 times to call a software maker about a devastating security flaw in one of its most popular programs. "It is so simple it is funny," the Pakistani researcher says. But nothing happened. Then he took his findings to a global audience — a worldwide mailing list devoted to exposing and exploring software bugs. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 169 Last | Next |
The time now is
7:55:19 PM
ET.
Any comment problems? E-mail us |
| #1 By 2459 (69.22.78.116) at 7/16/2003 5:25:52 AM |
|
The problem with this is that some who report bugs expect an almost immediate reply and don't consider that they aren't the only one sending reports. Some report mechanisms may not even provide a reply due to the number of reports received.
Who knows how many issues are in queue, and beyond that, how long it takes to research and test the bug assuming the bug reported is the main issue causing things to go wrong. Warning people about a security issue and giving possible workarounds or tips to avoid exploitation is okay. Releasing exploit code to anyone other than the software vendor is not. It just makes it that much easier for the bug to be exploited and does nothing to protect the end user. What value does a turnkey exploit kit hold for anyone other than the software maker for fixing the bug and the exploiter for exploiting the bug? |
|
Write Comment
Return to News |
Displaying 1 through 25 of 169 Last | Next |
The time now is
7:55:19 PM
ET.
Any comment problems? E-mail us |
