[techtalk] security problem

[Vincent Isaac West]

On Sat, 12 May 2001, Mary Gardiner wrote:

> Some loose notes from 'how to be a popular security flaw spotter,' 

as opposed to an unpopular one ;)

> 1) Contact the authors/those responsible first. 

This is a good point. Given that the flaw/exploit was posted to a
'beginner's list' I'd be pretty surprised that this is the first
everyone's heard of it, but..

It would be different if it had been posted to a developer's list, or a
known cracking list, or something *other* than a 'beginner's' list.

It might be useful to know the details of the flaw/bug/exploit

At least enough to check to see if it's been talked about elsewhere.

V.