Comment It is a business (Score 1) 112
I am surprised that so many people don't realize that computer security is a business. It is in the best interest of the researchers or security companies to release advisories for the sake of PR. It is a form of advertisement for security guys, that is why they want to produce reports. When you work on a security exploit, you want to release it not for the sake of making things less secure; but to show off your work and knowledge.
Imagine you worked on a problem for a month an then told you can talk about it. The fact they are giving vendors some time to fix the problem shows how responsible they are. This is there livelihood and there are not going to wait for ever to make money. Oracle doesn't want to fix it because it cost money, but for everyday the researcher or security company waits; it will cost them.
Imagine you worked on a problem for a month an then told you can talk about it. The fact they are giving vendors some time to fix the problem shows how responsible they are. This is there livelihood and there are not going to wait for ever to make money. Oracle doesn't want to fix it because it cost money, but for everyday the researcher or security company waits; it will cost them.
