Re: [Full-Disclosure] Vulnerability Disclosure Debate

[Florian Weimer <fw@deneb.enyo.de>]

"Joel R. Helgeson" <joel@helgeson.com> writes:

> If they did that, how could we write NESSUS plugins that would accurately
> scan for vulnerabilities?

You don't, so you buy a proprietary scanner.

Look at who's takes part in those coordinating forums.  Some companies
certainly have conflicting interests.

> Managing security by applying patches is fundamentally flawed.  The
> programmers need to write secure code.  The onus is on them, not us.

Then why do you think it's of any importance to write Nessus plugins? 8-)
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html