Should Software Vulnerabilities Be Posted Online?
We need to slow down on our requests for more and bigger, and instead require more secure. If we stop buying more—and only more secure—it will get their attention.
Robert Graves
Manager, Network Administration and Security
How this thing with Microsoft works: 1. They develop software. 2. They sell the software to me. 3. The software has lots of bugs that damage my business. 4. They then demand that I pay an annual maintenance fee to fix the bugs (MS-Technet is not free). 5. Instead of fixing the bugs, they develop a new version. 6. Instead of giving me the new version, they sell it to me. 7. I notice that many of my old applications no longer work. 8. I have to buy new versions of the languages (databases, whatever) needed to make them work. And guess what! I have to buy all of this from Microsoft. 9. I then have to fund the reprogramming and testing of replacement software (talk about a lack of ROI here!). 10. Then the cycle starts over.
Should they be responsible for the security bugs? They should be responsible for all bugs. But, unfortunately, our lax government is not willing to enforce the antitrust acts against a monopolist.
Jim Smith
Management Consultant
Sufficient information should be published to allow users to determine if they need a fix or patch, but not enough information to give anyone enough to exploit that code.
Robert Firestone
President
Systems Development Enterprises
$firstKeyword



