Spire Security Viewpoint: Security 7.0

July 29, 2008

Security 7.0

reserved for 2012... or at the rate we are going, first half of 2009...

Jul 29, 2008 10:39:09 AM

The comments to this entry are closed.

NEXT POST

Dan Kaminsky wants the world's gratitude - should we give it to him? I have a confession to make - I think many bugfinders out there are finding some really cool things, and I am glad they are doing this for us and not for the bad guys. It is easy to see how jazzed someone can be when they find a bug, and how quickly they can be consumed by it. But the "cool" factor really shouldn't be enough when dealing with OPR (other people's risk). Unfortunately, it appears that these same bugfinders are very poor at risk assessment. I think this is the case with Dan's DNS Debacle. He clearly means...

PREVIOUS POST

Paradox - revealing passwords is bad; revealing DNS attack technique is good? It sure seems like security professionals generally agree that the San Francisco DA who revealed a set of usernames and passwords increased the risk and did something "bad" for security. It sure seems like security professionals generally agree that the bugfinder who revealed an attack technique against many, many DNS servers did something "good" for security. Why is that?

I'm a guy with some ideas and opinions.

1 Following

0 Followers

Search

Recent Comments

Account Deleted: Great inof... thanks for the effort in explaini... | more »

On Microsoft's SDL has Saved the World!!
Fre Ek: Love the computer humor, from Dilbert to this p... | more »

On *[Adjective] Computer Worm [verb] Internet*
Account Deleted: Sağlık So funny. I guess that every press relea... | more »

On *[Adjective] Computer Worm [verb] Internet*