Let's also not forget the systems people who would rather know about problems so they can at least mitigate the situation by finding work-arounds, apply firewall or router filters, and/or disable services.
It's unacceptable to be left in the dark, no matter what the cost because the people who aren't aware of a problem can't defend their hosts or networks. Complaining about so-called whitehats, and the security community doesn't address the above. People have a right to know about problems, assuming that the researcher is kind enough to share the information. Len _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
