Well, damn. Just damn. Even after presenting this information in front of a few thousand highly skilled and trusted security professionals (let's face it, if you can get your office to shell out $1,500 to attend BlackHat Briefings, they pretty much must trust you) Cisco's lawyers are _still_ trying to spin this as if Abaddon's exploit technique were not "mature enough" and that he "did not follow proper industry disclosure rules". Oh yes, and the link mentions that the settlement of the suit they slapped him with (in bloody record time!) requires him to _never_ repeat what he spoke of at BlackHat. So much for the tradition of having PDFs of everyone's presentations available, and so much for anyone outside of that conference room being able get straightforward details on what is a _very_ serious matter that IT professionals should damn well know about. That, in a word, is _bullshit_. Abaddon has been doing his due diligence and then some on this issue for _months_. There is absolutely nothing that they could possibly say he didn't do. He talked with the FBI, the DHS (Department of Homeland Security), Cisco themselves (he even went to San Jose personally to tell them about it) and did his damnedest to make sure absolutely everyone involved knew the exact scope of the problem. Abaddon and the Lawyers of Cisco (spoiler) |