> If you're going to take the interpretation of full >disclosure literally, notification of the vendor and the public is >simultaneous.
this was my point, they are complaining about simultaneous disclosure. regardless if the exploit is feasable was not my concern, but the reaction to "Full Disclosure" they are on the OIS team??? ... but uhh "The software maker wasn't pleased with the premature revelation of the vulnerability before its security teams got a chance to look into the matter" ... i say again, too bad billy morning_wood _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
