[Previous entry: "DBMS_ASSERT can be used to protect against SQL Injection"] [Next entry: "Problems with the October CPU discovered"]
Disclosure or advertising?
November 14th, 2005 by Pete
Post to del.icio.us
Post to Furl
I saw an intersting news item this evening by Brian Martin titled "Disclosure or advertising?". This article explores whether full-disclosure of bugs is advertising or not for the researcher that finds the bug. This is quite controversial and actually is written about Oracle security bug researchers and is current if you read Oracles stance on this issue in their document "Security Vulnerability Fixing Policy and Process" in the section "credit for reporting vulnerabilities".
