Flaw finders to software makers: It's payback time

TalkBack 4 of 34:

Next »

« Previous

• Thread View
• Flat View

Valid concerns from true flaw finders

nothing worse than to be left out of the loop and wondering on the sincerity of the vendor's intent and methods to fix. Some of these vendors are not of this world when it comes to understanding. They see just their perspective, react poorly to 'assistance', and get tight lipped, even hostile if pressured before and after public disclosure. It's like someone causes an accident or could, and when a preventative bystander or officer points out the possible conclusions instead of focusing the solution, they focus on the messenger.

Now, whether you tell an 'outsider' your methods of fixing is a different dual edge. Yes knowing the method may ease concerns, but you'd have to trust the source isn't fishing for deeper hooks into the flaw 'maker'. "So that's how you code that or this is the process your team/management/coders employ". Social engineering may be afoot. But most likely not. You'd have to be inbetween skills to have to trick a vendor to see their base processes.

Posted by: Boot_Agnostic   Posted on: 08/17/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Wireless Lab Delivers Technology and a Better Education Dell Steve Spangler, assistant principal of Middlesboro Middle School in ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now