In so stating, I thank those researchers who are genuinely motivated by the public good, most of whom never get the headlines of their more notorious brethren. I also acknowledge that the vendor community needs to improve the quality of commercial software so we have far fewer vulnerabilities.
I found this timely, given the current circumstances. I think she makes valid points, but it's kinda like decrying teenagers for being poor drivers. Duh! Not everyone is going to have the same level of professionalism and decorum. I think in the current Cisco case, Michael covered his bases well and with integrity. For that, he should not be vilified. When security researchers become the problem |