Image flaw pierces PC security

TalkBack 3 of 50:

Next »

« Previous

• Thread View
• Flat View

Consultants who find it, give the companies time..

prior to posting it being found, so that leaves time for them to tell the companies like MS, Suse, Redhat, Apple or whoever about it and get a patch out. As a set amount of time comes out, it gives these companies a headstart before the exploit is posted. If say, Company A doesn't have a fix out after an alotted amount of time, too bad so sad, deal with the backlash. It still gives these companies a time table before the full exploit is disclosed.

Hackers themselves may already be exploiting the problem, and at this point, the companies need to get it patched immediately. You really never can tell until a consultant finds it anyway, but posting the fact immediately gives hackers just as much time to run an exploit as it does for the companies to post a fix. Some companies take their time with the patches and some fix it ASAP, but i still think there should be an alotted amount of time to give OS companies a headsup that it is possible to exploit, and a fix is needed, then post the possible exploit documents and already have a patch available.

Posted by: Monkey_MCSE   Posted on: 08/05/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now