Security Information Vulnerability Research Security Blog

Mozilla’s thoughts about responsible disclosure

March 27th, 2007 by , Filed under: Commentary, Culture, Full Disclosure, Web

According to News.com article Mozilla’s security chief Window Snyder states that

“The researcher has all the power. They control when they disclose it, and they control the idea whether or not the vendor responds in time.”

Very interesting reading.

Share
  • http://www.whiteacid.org/ Sid

    I’m not looking to start a debate about various disclosure techniques, but have a read of this: http://www.wiretrip.net/rfp/policy.html
    I think if you clarely stated you’re following the policy stated in that file in your initial contact with the vendor (or even in every contact) then you’re on solid ground from the start.

  • Share







  • Categories


Security RSS Subscribe