Flaw researcher settles dispute with Cisco

TalkBack 5 of 14:

Next »

« Previous

• Thread View
• Flat View

I agree--and that's the problem

Lynn's implication is that this technique will work with *any* unpatched flaw, which means it certainly is a huge deal.

Adding to his credibility is the fact he felt strongly enough to resign from ISS. Short of telling the judge to go to hell and mass posting the exploit across the newsgroups in a mailbomb, this is as strong a statement of the problem's severity as he could make.

Likewise, he is in a much better position than any of us to know exactly how bad the problem is. If he felt compelled to endanger himself (from Cisco) and inconvenience himself (by quitting) and further jepardize his future prospects in the field, I think that makes his statement in blazing neon on a dark night.

Likewise the massiveness of Cisco's response indicates *they think the problem is horrific too*.

You don't risk that kind of public backlash for a minor issue if you're a smart company, which Cisco is.

Posted by: wolf_z   Posted on: 07/29/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Client and Server System Performance Benchmarks Dell At their best, performance benchmarks provide impartial information that ... Download Now
• ActiveRoles Server ScriptLogic ActiveRoles Server can help you manage, automatically provision ... Download Now
• Dell Case Study: Bergstrasse District Council Dell The Bergstrasse district in Germany wanted to provide each pupil with a ... Download Now