Ethics of Communicating Vulnerabilities
Kim Zetter, at wired.com, reports on the ongoing tension between RSA and an information security blogger, Scott Jarkoff, who reported on what appears to be a flaw in the security architecture in the Web site of an RSA client. The tension has generated a renewed discussion on how vulnerabilities should be communicated when they are discovered.
Why do you think that RSA is pushing so hard, when doing so has created more chatter and made more people aware of this vulnerability as a result of their actions?
Subscribe to comments via RSS 2.0

