| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
Hacker Watchdog Group In The Works | |
|
||
| Time: 03:04 EST/08:04 GMT | News Source: CNET | Posted By: Julien Jay | ||
|
Microsoft and five security companies announced on Thursday that they would create an organization to promote the responsible publishing of information about software flaws. While many of the details have yet to be hammered out, the move marks the beginning of what could be the widespread emergence of ethical rules for security research. "There has been a need for industry convergence around a code of conduct for releasing exploits," said Eddie Schwartz, senior vice president and chief operating officer for security services firm Guardent, a founding member of the group. "We are going to form an organization to help us deal with the vulnerabilities. Ultimately, we want to develop some standards for releasing these things." The move, announced at Microsoft's Trusted Computing conference, had been widely expected. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 149 Last | Next |
The time now is
5:45:42 PM
ET.
Any comment problems? E-mail us |
| #1 By 2332 (129.21.145.80) at 11/9/2001 9:09:34 PM |
|
Sigh...
Ok, two points: 1.) What's wrong with asking the discoverer of a security flaw to keep that information confidential until a security patch can be written and distributed? It protects all parties involved, and minimizes the damage that can be done by these holes. 2.) It's one thing to provide information about a security hole - like the cause and solution - but it's another to simply provide an exploit who's only purpose is to do damage. I've heard excuses like "it's to force companies into quick response." Baloney. The exploits for countless holes have been posted both long after patches were available. Obviously, security through obscurity is stupid. But that's not what Microsoft is asking. It's not like they are asking for people to simply keep quite about the holes in hopes they will never be discovered. They are asking for the people who discover those holes to show some maturity and responsibility, and let Microsoft address the issue before exploits appear. By releasing this information before Microsoft has had a chance to provide patches, damage is done that could be easily avoided. I think, for the most part, it's all about ego. Many people who discover these bugs want "props" for thier work... and a little note at the end of a knowledge base article for a bug that never resulted in any damage just isn't good enough for them. Compensating perhaps? |
|
Write Comment
Return to News |
Displaying 1 through 25 of 149 Last | Next |
The time now is
5:45:42 PM
ET.
Any comment problems? E-mail us |
