Re: ISS Apache Advisory Response

From: Kevin Spett (kspettat_private)
Date: Sat Jun 22 2002 - 11:51:30 PDT

  • Next message: Cris Bailiff: "blowchunks - protecting existing apache servers until upgrades arrive"

    I have been informed by Chris Rouland that the statement that I quoted below
    is innacurate and was *not* made to CNN.com or AP.  Knowing how the media
    works and how innaccuracies do pop up in AP articles, I believe him and wish
    to retract my accusation of immaturity in regard to seeking credit.  I still
    stand firm with my other statements, though.
    
    Kevin Spett
    SPI Dynamics
    http://www.spidynamics.com/
    
    > > 6)      We do not view this as a race to beat other researchers to
    > releasing
    > > an advisory, but a race to protect our customers in a timely manner.
    >
    > Chris Rouland's statements to CNN
    >
    (http://www.cnn.com/2002/TECH/industry/06/18/computer.security.ap/index.html
    > ) make me doubt this:
    > "Complicating the matter, Rouland said he didn't trust Cox, who along with
    > his Apache duties is the senior director of engineering at Red Hat
    Software,
    > which distributes the Linux operating system. Rouland accused Red Hat of
    > taking credit for earlier ISS research. "
    > This is clearly simple, petty jealousy before responsibility.  You want
    > credit just like everyone else does, of course, but come on... And Apache
    > did give proper credit after all.
    



    This archive was generated by hypermail 2b30 : Sat Jun 22 2002 - 12:22:04 PDT