Bug hunters, software firms in uneasy alliance

TalkBack 18 of 20:

Next »

« Previous

• Thread View
• Flat View

Maybe he is expecting...

... To be part of that same process... By including researchers in also testing for any given patch or fix for the flaw they have found, the company is including them in the healing process. My take on this is that at least these reaserchers should be part of the testing bed for the companies to ensure the flaw they have discovered is indeed fixed or if there is no other way to exploit it. That's (to me at least) inclussive problem solving. By alienating and leaving in the dark these reaserchers, I don't think there is any incentive (beyond the monetary ones) to have these people collaborating with the company to help them solve their security issues.

At any rate, including these external reaserchers in the fixing process would ensure, or at least that's the way I see it, better cooperation from these individuals in further test, identify and counsel companies with regards security... Just as long as the company is willing to listen to these people and truly give a dime about security.

My 2?

Posted by: thetargos   Posted on: 09/06/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now