Slashdot Mirror
Schneier On Full Disclosure
Bruce let me know that he's written a piece on ZDNet (original home of the for the Window of Exposure idea is on Counterpane ? ) about the problems of not following full disclosure. Very well written and does a great job of summarizing why full disclosure works. The original piece from Culp @ Microsoft is also available, along with the PowerPoint that they did.
Full disclosure may be good, but full exposure will get you thrown in jail!
"People that quote themselves in their signatures bother me" - athakur999
Everybody seems to like "Full Disclosure," so here at Microsoft, we've decided to begin releasing all security vulnerabilities under a "Shared Disclosure" policy. Once the various NDAs are signed, you too can view and work with any security vulnerabilities that we know about.
Just another example of how Microsoft listens to and responds to customer requests. Have a nice day!
If a tree fell on a florist, and nobody was around to hear it, would he make a noise?
When you see a fire in a crowded theatre, you:
(A) Shout "FIRE!" and get crushed in the panic.
(B) Walk out quietly...who cares about anyone else?
(C) Tell your closest neighbor and hope that they're a fireman.
(D) Pour on gasoline so everyone will get out faster.
...along with the PowerPoint that they did
They re-did PowerPoint?!?! k-l33t man!
oh - wait - they just did a PowerPoint presentation.
You should quietly walk over to the door, then yell fire as you are leaving :)
> By analogy, this isn't a call for
> people for give up freedom of speech;
> only that they stop yelling fire in
> a crowded movie house.
Another wonderful analogy!
Security professionals have been yelling "fire" in crowded movie houses for years. Most of the actual patrons fail to pay any attention, despite the fact that the seats are made of explosively flammable materials, the management allows patrons to smoke cigarettes in the theatre, and occasionally the movie is interrupted by ushers dousing patrons with fire hoses if they are noticeably ablaze. Patrons who do catch fire are not offered a refund, nor a credit for those parts of the movie that they miss, nor even so much as an apology.
--- Zygo Blaxell (zblaxell, feedme.hungrycats.org)
I refuse to believe corporations are people until Texas executes one. -- desert rain on http://www.dailykos.com/user/
It's not just what he says; it's how he says it. For some reason, the above sentence makes me think of a particular vendor.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
Someone suggested that the Manhattan Project go to the United States Treasury and ask for silver.
Of course, this was before somebody suggesting using Uranium and Plutonium. They gave the silver back because it wouldn't blow up. Uranium makes really lousy money on the other hand. Is has a good weight, and it's a bit warm to the touch, giving it a nice feel in your hands. But it tended to cause tumors on the upper thigh, right where trouser's pockets are. So for the treasury and the war department, it was what you'd call a "win-win situation".
If tits were wings it'd be flying around.