Re: A really bad month for Novell

"Anton Chuvakin" <anton_at_chuvakin.org> said:

>Wow, did something happen in the world and I totally missed it? Is
>this what they call a "best practice" (yak!) now...? 1 year and 3
>months to report a vuln to a vendor...

You sometimes see these kinds of tidbits in iDEFENSE advisories, too.
I'm not sure of the reason for it, although maybe there's a delay
while they verify if the issue is real, and/or figure out who to
notify at the vendor. Which I know many researchers can relate to :)

- Steve
_______________________________________________
Dailydave mailing list
Dailydave_at_lists.immunitysec.com
http://lists.immunitysec.com/mailman/listinfo/dailydave
Received on Dec 07 2006