RE: [Full-Disclosure] no more public exploits

From: Ng, Kenneth (US) (kenng_at_kpmg.com)
Date: 04/27/04

  • Next message: SGI Security Coordinator: "[Full-Disclosure] SGI ProPack v2.4: Kernel update #3" 
    To: "'Duquette, John'" <john.duquette@eds.com>, Yabby <yabby@softhome.net>, full-disclosure@lists.netsys.com
Date: Tue, 27 Apr 2004 15:31:14 -0400

    Sadly, for the most part, no. But, don't just blame the sysadmins. Also
    blame the business owners who demand to see a person being electricuted
    before they believe a wire is unsafe. And blame the vendors for bundling
    stealth updates along with their security fixes. Stealth updates that
    "accidentally" break competitors products. There is plenty of blame to go
    around.

    -----Original Message-----
    From: full-disclosure-admin@lists.netsys.com
    [mailto:full-disclosure-admin@lists.netsys.com]On Behalf Of Duquette,
    John
    Sent: Tuesday, April 27, 2004 1:52 PM
    To: Yabby; full-disclosure@lists.netsys.com
    Subject: RE: [Full-Disclosure] no more public exploits

    That is a terrible policy to follow. If the vulnerability is real enough
    for the vendor to publish a patch, then sysadmins should patch their
    systems. Haven't all the recent worms taught people anything?

    *****************************************************************************
    The information in this email is confidential and may be legally privileged.
    It is intended solely for the addressee. Access to this email by anyone else
    is unauthorized.

    If you are not the intended recipient, any disclosure, copying, distribution
    or any action taken or omitted to be taken in reliance on it, is prohibited
    and may be unlawful. When addressed to our clients any opinions or advice
    contained in this email are subject to the terms and conditions expressed in
    the governing KPMG client engagement letter.
    *****************************************************************************

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: SGI Security Coordinator: "[Full-Disclosure] SGI ProPack v2.4: Kernel update #3"