Buy and Tell: TippingPoint to Disclose Purchased Flaws

[davidh]

" Buy and Tell: TippingPoint to Disclose Purchased Flaws
By Ryan Naraine
August 28, 2006

A security company that pays hackers for information on software flaws and exploits plans to release a list of 29 unpatched flaws in products sold by a host of big-name vendors, including Microsoft, IBM, Apple Computer and Novell."

http://www.eweek.com/article2/0,1759,2008577,00.asp?kc=EWRSS03129TX1K0000614

Putting the feet of the big boys to the fire.

dh

[Judy G. Russell]

With the new disclosure policy, Endler said he believes TippingPoint can serve as an industry "watchdog" against companies that drag their feet when software vulnerabilities are reported."Drag their feet" is right. And maybe this sort of publicity will move them along.