On Tue, 16 Apr 2002, David Ayliffe wrote:
> Are MySQL really going to give you details of their past security
> 'issues'?
> 
> Think about it.  Try going underground and looking on some exploit
> sites.
> 
> DA
> 
> 
> >>>>>
> Hi,
> I'm working on security breaches in MySQL. Can someone guide me in this.
> To be precise can you tell me about some literature, some book which is
> easy to understand and also profound ! If anyone is working on that,
> I'll be more than happy to interact. Thanking you.

Why not? If a vunerability is discovered for which no known exploit exists
it's reasonable to withold that information (for a limited period) whilst a fix
is developed.  If the vunerability is showing up on exploit sites I'd expect
MySQL AB to be shouting it's existance (if not howto details) from the roof
tops so the users can take counter measures whether a fix exists or not. 

Nigel

---------------------------------------------------------------------
Before posting, please check:
   http://www.mysql.com/manual.php   (the manual)
   http://lists.mysql.com/           (the list archive)

To request this thread, e-mail <[EMAIL PROTECTED]>
To unsubscribe, e-mail <[EMAIL PROTECTED]>
Trouble unsubscribing? Try: http://lists.mysql.com/php/unsubscribe.php

Reply via email to