November 2009 – Security

Clarification to the previous post

November 16, 2009November 16, 2009 by halvar.flake

halvar.flake

Hey all,I thought I need to clarify something about the previous post: I was trying to explain the fact that people reacted harshly to the hint that a new standard is being drafted, without knowing anything about it. So I talked about the historical perspective on the old OIS draft,…

Clarification to the previous post

November 16, 2009November 16, 2009 by halvar.flake

halvar.flake

Why are most researchers not a fan of standards on "responsible disclosure"

November 15, 2009November 15, 2009 by halvar.flake

halvar.flake

I usually try to stay away from the politics of vulnerability disclosure, mostly because I think (to paraphrase Feynman) that politics of vulnerability disclosure are as useful to the vulnerability researcher as ornithology is to birds.But it seems that the entire discussion is not going away. The intensity of the…

Why are most researchers not a fan of standards on "responsible disclosure"

November 15, 2009November 15, 2009 by halvar.flake

halvar.flake

Low blogging frequency

November 10, 2009November 10, 2009 by halvar.flake

halvar.flake

Hey all,first of all, I seriously have to apologize for the low frequency of blog posts nowadays. We have been doing a bunch of interesting things at work that I will post about shortly. Amongst thethings on my "to-post" list are:Rants on our experiences distributing VxClassA method to perform exact…

Low blogging frequency

November 10, 2009November 10, 2009 by halvar.flake

halvar.flake