Torvalds attacks IT industry 'security circus'

TalkBack 19 of 30:

Next »

« Previous

• Thread View
• Flat View

It's not an "attack" ... it is the TRUTH!!

What Tovalds is saying is 100% true. Many in the security industry are there just to get glory and are totally irresponsible.

His words apply to not only Linux, but Windows, Solaris, OS-X, Irix, etc. (ie: any OS).

When a vulnerability is found, the responsible thing to do is notify the vendor/developer privately and provide enough time to fix the problem. If the vendor/developer is irresponsible (lets say 30 days for a simple problem, 6 months of a huge vulnerability) then and only then should they contemplate releasing the code and info.

Releasing information about a vulnerability just to get the name is just as bad as using the vulnerability to commit computer crimes. All they do is provide free services to criminals instead of helping to resolve the problem.

Posted by: wackoae   Posted on: 07/17/08 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Using NIC Teaming to Achieve High Availability on Linux Platforms Dell Network interface card (NIC) teaming is one method for providing high ... Download Now
• SOA for Dummies 2nd IBM Limited Edition Mini eBook IBM Learn the basics of SOA by following 7 real-life companies as they experience the truly game-changing effects of this important technology initiative. Download Now