Re: [Full-disclosure] Why Vulnerability Databases can't do everything

[Georgi Guninski <guninski@xxxxxxxxxxxx>]

On Fri, Jul 15, 2005 at 02:35:52PM -0400, Steven M. Christey wrote:
> 
> In addition, vulnerability databases and notification services have
> to:
>

(7) be responsible and ethical, without being whores [1]. 
(8) help make the infidels responsible and ethical.



[1]
http://www.whitehats.ca/main/about_us/policies/draft-christey-wysopal-vuln-disclosure-00.txt
Steve Christey
INTERNET-DRAFT                                                     MITRE
Valid for six months                                       Chris Wysopal
Category: Best Current Practice                             @stake, Inc.
                                                           February 2002

              Responsible Vulnerability Disclosure Process
             draft-christey-wysopal-vuln-disclosure-00.txt
 

-- 
where do you want bill gates to go today?


















_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/