Why not punish all the admins/users who failed to patch their systems in
time as well.
Because they didn't break the law. It's really that simple. If you're saying that you think there should be a law to force people to patch their systems in a timely manner, that's a different issue. (and one that will lead to all sorts of unintended problems...think about it for a while.)
Aaron
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
