| Bernhard R. Link 2005-03-15, 6:00 pm |
| * Matthew Palmer <mpalmer@debian.org> [050315 01:48]:
> I think a lot of users would consider it a problem. Imagine, would you be
> happy with a highly visible public announcement of every vulnerability
> against your servers, a week before you got the fix?
Yes, indeed I (and I think most others) are very unhappy with the
opposite: Not beeing told there is a vulnarability when enough people
know it that one has to assume the black-hats know it, too.
Knowing there is a vulnarability one can shut down optional services,
or monitor some services more thoroughly. The script kiddies will have
to wait until they get their scripts and I doubt wait for the
annoucement of the vulnerability.
Hochachtungsvoll,
Bernhard R. Link
--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
|