Cisco hits back at flaw researcher

TalkBack 28 of 68:

Next »

« Previous

• Thread View
• Flat View

Get a clue

If you really think that he would quit his job for "15 minutes of fame", you really don't know much.

Mike Lynn has already had his "15 Minutes" of fame, over the past several years. Mike's knowledge, experience, and professionalism have been shown time and time again, with his dedication to doing the right things, for the right reasons.

For you to make disparaging comments about a collegue who has done so much for the security community at large, you either are ignorant of Information Security, or simply ignorant.

Mike exposed the vulnerability, without providing ANYONE the source code, in order to move a behemoth company into action. Cisco was aware of the problem late last year, announced a patch in March of this year, without addressing the actual vulnerability.

If you would read the rest of the press surrounding this event, you'll see that Cisco, ISS and Mike were working together to put the presentation together, and at the last minute, Cisco tried to stop the presentation, citing, "Premature release". How is working on the issue for over 9 months premature?

Look at Cisco's own public statement... http://www.cisco.com/en/US/about/security/intelligence/MySDN_CiscoIOS.html

where it says, "... the information presented at the Black Hat Conference yesterday was not a disclosure of a new vulnerability or a flaw with Cisco IOS software..."

So, how is he doing something "wrong"? He's exposing a weakness in the very structure of the internet. As a security professional, I would hope that ANY of my peers would do the same in the same position.

If the foundation of a skyscraper was weak, and you knew about it, would you keep it to yourself? or would you attempt to tell someone?

If you told someone, and they didn't do anything about it, what you do then? Would you pony up, and put your career on the line? or would you slink away, afraid of being labeled as a Spotlight Seeker?

Get a clue...

Posted by: jnoble@...   Posted on: 07/28/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• The Impact of Virtualization Software on Operating Environments VMware Today's use of virtualization technology allows IT professionals to ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now