We can all agree that a security flaw in the routers that underpin the Internet and most enterprise networks--especially a flaw that allegedly lets an attacker monitor traffic passing through the devices--is serious. But who sets the ground rules for outing that flaw? Like it or not, the law prohibits employees or former employees from making off with company-financed research. (Whether Lynn reverse-engineered Cisco's software to find the flaw and whether he would have broken the law in doing so are unclear.)

By Rob Preston at Security Pipeline.

[ Read more ]