Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: MSIE (mshtml.dll) OBJECT tag vulnerability
From: "Randal T. Rioux" <randy () procyonlabs com>
Date: Wed, 26 Apr 2006 18:20:32 -0400

Hash: RIPEMD160

Tim Bilbro wrote:
You do a disservice to all IT shops by announcing these vulnerabilities
before contacting the vendor. 

I think lame inaccurate "blogging" causes more harm than research and
result dissemination.

Seriously - those who think full disclosure is bad should think a little
more. Would you be happy if all software were more like the Bush
administration? Secrets are the results of corruption. If you write
bad/insecure software and charge out the ass for it - you bet I'd want
it to work and be as secure as advertised.

Randal T. Rioux | Procyon Labs
IT Security R&D and Consulting
Virtual: www.procyonlabs.com
Physical: DC / Baltimore
PGP: gpg --keyserver pgp.mit.edu --recv-keys 0xD08D1941

Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org


Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]