Re: Complicated Disclosure Scenario

From: Florian Weimer (Weimerat_private-Stuttgart.DE)
Date: Thu Jan 17 2002 - 03:04:10 PST

Next message: Mariusz Mazur: "Re: Complicated Disclosure Scenario"

Previous message: Bill Weiss: "Re: Complicated Disclosure Scenario"
In reply to: Josha Bronson: "Complicated Disclosure Scenario"
Next in thread: Nick Lange: "Re: Complicated Disclosure Scenario"
Next in thread: Mariusz Mazur: "Re: Complicated Disclosure Scenario"
Reply: Nick Lange: "Re: Complicated Disclosure Scenario"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Josha Bronson <dmuzat_private> writes:

> So, what would you do?

Write to the vendor and announce the publication of the preliminary
results within, say, two weeks, and rely on Full Disclosure forcing
the vendor to provide a fix.  (However, there might be constraints in
your license contracts which could make this illegal.)

I'm surprised that this aspect of Full Disclosure is still necessary
today.

-- 
Florian Weimer 	                  Weimerat_private-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          +49-711-685-5973/fax +49-711-685-5898

Next message: Mariusz Mazur: "Re: Complicated Disclosure Scenario"
Previous message: Bill Weiss: "Re: Complicated Disclosure Scenario"
In reply to: Josha Bronson: "Complicated Disclosure Scenario"
Next in thread: Nick Lange: "Re: Complicated Disclosure Scenario"
Next in thread: Mariusz Mazur: "Re: Complicated Disclosure Scenario"
Reply: Nick Lange: "Re: Complicated Disclosure Scenario"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Thu Jan 17 2002 - 11:13:13 PST