Pete Finnigan's Oracle Security Weblog

I have just been looking at some of the comments to Mary Ann Davidsons news article written last week titled http://news.com.com/2010-1071-5807074.html?tag=tb - (broken link) When security researchers become the problem. Someone made me aware of a response to the article and said to go and read it. The comment I was directed at was in response to another comment, so let's talk about this comment first. This is titled http://news.com.com/5208-1071-0.html?forumID=1&threadID=8306&messageID=58650&start=-185 - (broken link) After fact article about Michael Lynn? posted by Walt. I think Walt is not up on current Oracle security events as he assumed that Mary Ann's article is about Michael Lynn going public about cisco bugs. I am not certain she is actually talking about Michael Lynn at all but all that said Walts final comments that it is the vendor�s responsibility to offer patches quickly is the key. The comment I was pointed at is written by Rogue Shoten and is titled http://news.com.com/5208-1071-0.html?forumID=1&threadID=8306&messageID=59434&start=-1 - (broken link) Half the story which takes an interesting angle on the issue of information disclosure.