Security Dissection and Rants » Full Disclosure http://www.iglobalonline.com Penetrating security, one app at a time Fri, 09 Apr 2010 18:08:39 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Disclosure http://www.iglobalonline.com/disclosure/ http://www.iglobalonline.com/disclosure/#comments Fri, 05 Feb 2010 22:04:17 +0000 Michael http://www.iglobalonline.com/?page_id=16 In some circumstances we will uncover vulnerabilities or design flaws, we believe and practice proper disclosure. Prior to releasing vulnerabilities to the public, we notify vendors 7 to 14 days prior to public disclosure. This gives the ability to the vendor to issue a patch or upgrade before disclosure happens.

Of course, some vendors do not like this because it shines line on their security through obscurity. We believe hiding from vulnerabilities will only leave users at risk thus properly disclosing it to the public will put pressure for quicker patches.

All Tags: CVE, Full Disclosure, SecLists, Timeline
]]> http://www.iglobalonline.com/disclosure/feed/ 0