article: The value of vulnerabilities
Posted by jericho
http://www.securityfocus.com/columnists/391
The value of vulnerabilities Jason Miller, 2006-03-07
There is value in finding vulnerabilities. Yet many people believe that a vulnerability doesn’t exist until it is disclosed to the public. We know that vulnerabilities need to be disclosed, but what role do vendors have to make these issues public?
Where do vulnerabilities come from? [..] The value in vulnerabilities [..] The ethics of vulnerabilities [..] Why we need responsible, public disclosure [..]