HA! I at least would like to know if my software opens a door to whatever can be hacked/transmitted or whatever... Scott Culp, the Manager of the Microsoft Security Response Center, has issued an article about recent developments in the security community. He states that reports about security flaws/bugs in software were the key to worms like Code Red, Lion, Sadmind, Ramen, Nimda and hack attacks. Quote:
It?s high time the security community stopped providing blueprints for building these weapons. (...) While the industry can and should deliver more secure products, it?s unrealistic to expect that we will ever achieve perfection. All non-trivial software contains bugs, and modern software systems are anything but trivial. (...) ...a practice that?s best described as information anarchy. This is the practice of deliberately publishing explicit, step-by-step instructions for exploiting security vulnerabilities, without regard for how the information may be used. (...) For its part, Microsoft will be working with other industry leaders over the course of the coming months, to build an industry-wide consensus on this issue. Full article @ M$ What do you think? Let it all be discussed behind closed doors or be able to decide to shut down or decrease use of software on your own?
It?s high time the security community stopped providing blueprints for building these weapons. (...) While the industry can and should deliver more secure products, it?s unrealistic to expect that we will ever achieve perfection. All non-trivial software contains bugs, and modern software systems are anything but trivial. (...) ...a practice that?s best described as information anarchy. This is the practice of deliberately publishing explicit, step-by-step instructions for exploiting security vulnerabilities, without regard for how the information may be used. (...) For its part, Microsoft will be working with other industry leaders over the course of the coming months, to build an industry-wide consensus on this issue. Full article @ M$ What do you think? Let it all be discussed behind closed doors or be able to decide to shut down or decrease use of software on your own?