The new security disclosure landscape

Monday, 1 October 2007, 12:00 AM EST

Security disclosure has always been a contested topic, pitting “those that find the bugs” against “those that are responsible for the bugs.” In the days before security disclosure became a formal topic, those people who gave credence to some sort of moral compass often sought to follow a “gentleman’s code” that typically involved an earnest attempt to disclose the problem to the vendor and give the vendor a chance to fix it. There eventually came a time when this unofficial disclosure code of conduct became subject to different ideologies, which made it hard to know what ideology a discloser or vendor embraced. So the logical move was to write down the unwritten rules of disclosure, and that’s where RFPolicy came from. Note that the goal was not to specify the rules of disclosure, but rather to document one specific disclosure ideology.

At the BlueHat blog.

[ Read more ]




Spotlight

Cloned, booby-trapped Dark Web sites steal bitcoins, login credentials

Apart from being a way for dissidents and journalists to do their business without being spotted and identified by "the powers that be", the Dark Web is also a place where criminals sell and buy illegal wares and services and, apparently, where they also get robbed by scammers.


Weekly newsletter

Reading our newsletter every Monday will keep you up-to-date with security news.
  



Daily digest

Receive a daily digest of the latest security news.
  
DON'T
MISS

Fri, Jul 3rd
    COPYRIGHT 1998-2015 BY HELP NET SECURITY.   // READ OUR PRIVACY POLICY // ABOUT US // ADVERTISE //