On The Costs of Full Security Disclosure
sasha328 writes "I found reference to this email on the LWN.NET site which was sent to the SecurityFocus mailing list. It asks a very valid question about how much you can disclose before malicious virii can be possible."
First of all what does this have to do with code red? The virus is self replicating and the creater was using a, from what I've been reading, unpublished exploit. After the first 50, 60, or some small amount of computers are compromised the thing pretty much runs itself. Theoretically this could have all started with manually cracking one computer and no human intervention after that. Not publising would not have stopped the spread. Its not like 20,000 little crackers were tirelessly manually installing code red on a zillion different computers and then telling their friends how to do it. At least if the exploit is published, the poor slob who gets hit with this virus first has some idea what to look for. IIS is out there and you can't stop people from reverse engineering it no matter haow many laws you pass. The best wepon we have is to keep the "good guys" as well informed as possible. I want to know when the vendor knows, maybe I can't fix it but I sure as hell don't want to be flying blind. < sarcasm > Yeah, lets intentionally limit the information I have access to so I can be even more unprepared when a virus hits.< /sarcasm >....riiiiiight good move.
BOFH, My model for being a sysadmin :)
Troll
Rockin the Slashdot
by the CmdrTaco Five
Let me tell y'all what it's like
Being male, supergay and white
I'm a bitch, if you don't believe
Listen up to my new CD
(Sha-mon)
I got shit runnin' down the drain
Enemas so intense that I can't explain
All alone in my white-boy pain
Y'all Shake your booty while Jeff complains
I'm rockin' the Slashdot
Just like Linus Torvalds did
I'm rockin' the Slashdot
Except that he is talented
I'm rockin' the Slashdot
I take the cheques and face the facts
That VA Linux don't make computers and soon I'll get the axe
I'm pissed off but I'm too polite
When people crapflood my pet web site
Mom and Dad taught me what is right
IP Ban them in the dead of night
I don't know how much I can take
But I'll find out with your tube steak
I'm rockin' the Slashdot
Just like Bruce Perens did
I'm rockin' the Slashdot
Except that he thinks he's talented
I'm rockin' the Slashdot
I take the cheques and face the facts
That VA Linux don't make computers and soon I'll get the axe
In a haze these days
I pull up to the stop light
I can feel that something's not right
I can feel that someone's pumping me with hate
Ouch!
Hope he's wearing a condom
'Cause somone on my web site posted OT III
About someone's great great great great Grandaddies aliens
It wasn't my idea
It wasn't my idea
Never was my idea
I just drove to the store
For some Assstroooooglide!
Y'all don't know what it's like
Being male, supergay and white
Y'all don't know what it's like
Being male, supergay and white
Y'all don't know what it's like
Being male, supergay and white
Y'all don't know what it's like
Being male, supergay and white
It gets me real pissed off, it makes me wanna say
It gets me real pissed off and it makes me wanna say
It gets me real pissed off and it makes me wanna say
RIMJOB!!!!!!!!!!!!
...Just like Richard Stallman did
I'm rockin' the Slashdot
Except that he is a Communist
I'm rockin' the Slashdot
I take the cheques and face the facts
That VA Linux don't make computers and soon I'll get the axe
These days
Yeah yeah
I'm rockin' the Slashdot
Yeah yeah
I'm rockin' the Slashdot
Yeah yeah
You'd better look out, because I'm gonna say RIMJOB
You'd better look out, because I'm gonna say GOLDEN SHOWER
You'd better look out, because I'm gonna say FECES
You'd better look out, because I'm gonna say POOP
Based on this logic I assume you are for gun training for young people too? "There are guns. Young people get guns. So we should train them to use them properly not say 'guns = bad! Never touch a gun'". Is that where you are going with your argument? And don't EVEN say they are not same thing. Guns kill. AIDS and Syphilis kills. Pregnancy can kill a teenagers choices for the future. I just want to see if you are consistant with your reasoning...