Bug hunters, software firms in uneasy alliance

TalkBack 20 of 20:

« Previous

• Thread View
• Flat View

Great way to cheat users.

Responsible Disclosure:

Basically, I see this whole responsible disclosure as a bunch of BS. CYA (Cover your ass) is what they're doing, while trying to reduce costs and make US bare the brunt instead.

We pour in suggestions, report bugs and (try) to take the time to listen to what they have to say, (At least most of us do) and they delay and delay, and throw the blame at us for THEIR faulty code. "Well if you hadn't been maliciously looking for exploits in our software it never would have been known to hackers. See you in court, buddy."

Granted, it is nice for a Vuln to remain behind closed doors so it doesn't affect the public at large, but it should only remain behind those doors for a VERY short period of time.
Microsoft is no stranger to slapping their lackies around, I've heard stories from friends who've worked for Microsoft. If they were really concerned about security, they'd get to slapping instead of sitting around, waiting for it FINALLY go public before they act.

I for one would rather go straight to the public and light a fire under their asses to get it fixed. No, I wouldn't give out the details as to how a certain exploit would be achieved, thats just asking for it to be widespread. (duh)
I would be doing exactly as I stated, lighting a fire under thier asses to get it fixed. Of course I'd give them the details, after the public knew about the vuln in the first place.

Its like an anti-virus company getting ahold of new virus code and just waiting to see what it does firsthand instead of fixing it, before it becomes an epidemic.

"We'll just let a few (hundred thousand) more people get infected so they'll buy our software to fix it."

And that brings me to;

Blue Hat:

(Almost) Free Market Research in action, friends. Again, we're baring the brunt of their failures and faults. Sure they fill you full of food and booze and make you feel welcomed. The truth is, you are welcomed. They would rather, as someone stated earlier "pick your brain" than have you arrested and keep the secret locked behind you lips.

And not only did we tell them about it, we SHOWED them, for the "price of free". And what do we get out of all of this? XP raises in price, Longhorn somehow turned into Vista. And soon all our computers will be asking. "Booting up, allow or deny."

Yes to everyone who is going to post, I singled out Microsoft because I hate their software. No I do not generalize their employees as stupid, nor would I ever. Granted I do think Microsoft has its hand in everyones cookie jar, sometimes its there for a good reason. We do owe them for the creation of Windows, even if its one big exploit after another.

Posted by: DarkLordPazuzu   Posted on: 05/22/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now