nCircle.com >> 360 Security

« Die, XML | Main | SCADAGard SIG To Be Established »

Instant full disclosure really does work

some excerpts from midway down the article http://blogs.washingtonpost.com/securityfix/2006/01/a_timeline_of_m.html, yeah I copped it from slashdot, couldn't resist

"The data show that one area where Microsoft appears to be fixing problems more quickly is when the company learns of security holes in its products at the same time as everyone else."

Which is followed by:

"It is important to note, however, that in nearly all full-disclosure cases cited here, news of the vulnerability was also issued alongside computer code demonstrating how attackers might exploit the flaw."

Now that is delightful to hear - although, of course, it's just pragmatic, common sense.

Comments (2)

graver:

In other news;

"Children playing with matches lead to faster response times from local Fire Departments, than children playing with Safety Equipped BBQ Lighters." Authorities were quoted as saying, "Our guys got there quicker because the flames just tended to be much higher."

Byron Sonne:

But the Fire Departments *did* get there faster, didn't they? Kids will always play with matches :)

I will concede that the means don't justify the end, and vice versa.

To continue the analogy (after too many incidents of kids playing with matches) fire response technology, fire fighter training, house construction, materials science, match technology as well as sociological and political techniques were all discussed and advanced, and the thusly the world became a better place.

Post a comment

(If you haven't left a comment here before, you may need to be approved by the site owner before your comment will appear. Until then, it won't appear on the entry. Thanks for waiting.)

About

This page contains a single entry from the blog posted on January 11, 2006 10:28 AM.

The previous post in this blog was Die, XML.

The next post in this blog is SCADAGard SIG To Be Established.

Many more can be found on the main index page or by looking through the archives.