Vulnerability disclosure gone awry: Understanding the DNS debacle

TalkBack 1 of 19:

Next »

• Thread View
• Flat View

I think he deserved better for sure

You know, Dan does manipulate the media well, but I'll tell you this, he's a stand-up guy. Did he try to drum up the press a bit? Sure, why not? Did he choose his method of disclosure and call for no attempts to figure his research out for media frenzy? I say no way.

This was a huge bug. When I saw the details of just how simple it was, I realized it was what I expected... something that exploit code could be out for within a number of hours, not days.

I think Dan did the best he could to protect people for as long as possible, and no matter your thought on that, that is respectable.

For the record, I wish it would've worked out differently for everyone involved... I consider them all great guys. Also, I'll still be going to Dan's talk. Halvar commented on this on his blog, saying to now not go to Dan's talk would be like going to see a renowned physicist and some dude on the street tells you what he'll say... would you still go? Of course. Now, Halvar's no dude on the street, but Dan's talk will still be 100% entertainment, because, if for nothing else, Dan is a great speaker and this is a huge flaw.

-Nate

Posted by: nmcfeters   Posted on: 07/22/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now