Firm To Release Database, Web Server 0-Days
krebsonsecurity writes "January promises to be a busy month for Web server and database administrators alike: A security research firm in Russia says it plans to release information about a slew of previously undocumented vulnerabilities in several widely-used commercial software products, including MySQL, Tivoli, IBM DB2, Sun Directory, and a host of others, writes krebsonsecurity.com. From the blog: 'After working with the vendors long enough, we've come to conclusion that, to put it simply, it is a waste of time. Now, we do not contact with vendors and do not support so-called "responsible disclosure" policy,' Legerov said."
I mean really.
Waduyaexpect ?? theworldwouldbeabetterplacewithoutthem !!
if you think it's wrong, you shouldn't have built the software with the mistakes in it in the first place, to me, this sounds like, please dont do it, I'll get fired. you got fired because you wrote crap code, learn and improve. chris