Comments on: Security Round Table – Episode 3 – Liability for Vulnerabilities and Responsible Reporting http://www.securityroundtable.com/srt3/ Security Podcasters Discussing Top Issues Tue, 25 Sep 2007 16:36:51 +0000 hourly 1 http://wordpress.org/?v=3.0.1 By: gazanga http://www.securityroundtable.com/srt3/comment-page-1/#comment-16 gazanga Wed, 26 Jul 2006 02:25:56 +0000 http://www.securityroundtable.com/?p=12#comment-16 I'm not sure if my last post went through. I enjoyed the podcast but am getting kind of sick of people not being able to lose their objectivity. They have such a built in hatred for Microsoft that they can't recognize where they were and where they are. The old-school, if you don't wet yourself when you hear *nix, is really short-sighted. The fact is Microsoft is here to stay. Their patch schedule is a great idea and is saving enterprises lots of money and allowing them to better calculate risk. As Alan said, on a vulnerabilities to user ratio, Microsoft is a better solution for most. The OS is easier to patch and not that bad. I will always have an affinity for my *nix flavors, but I know my endusers and CEO will always make me have to support Microsoft. With that being said, I think that with it being a necessary evil, it's good to have a reliable patch schedule. Also as far as the format goes, I really enjoyed a lot of what everyone had to say, with the exception of Martin. He is a bit long winded and doesn't really offer anything new or relevant to the conversation. He's about 80% B.S. and 20% over his head. I’m not sure if my last post went through.

I enjoyed the podcast but am getting kind of sick of people not being able to lose their objectivity. They have such a built in hatred for Microsoft that they can’t recognize where they were and where they are. The old-school, if you don’t wet yourself when you hear *nix, is really short-sighted. The fact is Microsoft is here to stay. Their patch schedule is a great idea and is saving enterprises lots of money and allowing them to better calculate risk.
As Alan said, on a vulnerabilities to user ratio, Microsoft is a better solution for most. The OS is easier to patch and not that bad. I will always have an affinity for my *nix flavors, but I know my endusers and CEO will always make me have to support Microsoft. With that being said, I think that with it being a necessary evil, it’s good to have a reliable patch schedule.

Also as far as the format goes, I really enjoyed a lot of what everyone had to say, with the exception of Martin. He is a bit long winded and doesn’t really offer anything new or relevant to the conversation. He’s about 80% B.S. and 20% over his head.

]]> By: gazanga http://www.securityroundtable.com/srt3/comment-page-1/#comment-15 gazanga Wed, 26 Jul 2006 02:20:21 +0000 http://www.securityroundtable.com/?p=12#comment-15 I know that roundtables can be difficult but some of the rants were very biased. It's the old school, if you defend Microsoft, you're not a true techy. You can love *nix and appreciate what Microsoft does. For example, look at McAfee. In Feburary, they discovered and patched a vulnerability in EPO. Last month, a third party finds the hole and announces it. This requires McAfee to scramble for press releases to get the word out. A regular update cycle could of helped remedy this. Imagine how much better Linux would be if a regular release schedule was available? Overall you guys are doing well, I just get the idea that Martin is about 80% B.S. and 20% in over his head. Just my opinion... I know that roundtables can be difficult but some of the rants were very biased. It’s the old school, if you defend Microsoft, you’re not a true techy. You can love *nix and appreciate what Microsoft does. For example, look at McAfee. In Feburary, they discovered and patched a vulnerability in EPO. Last month, a third party finds the hole and announces it. This requires McAfee to scramble for press releases to get the word out. A regular update cycle could of helped remedy this.

Imagine how much better Linux would be if a regular release schedule was available?

Overall you guys are doing well, I just get the idea that Martin is about 80% B.S. and 20% in over his head. Just my opinion…

]]> By: cseifert http://www.securityroundtable.com/srt3/comment-page-1/#comment-13 cseifert Mon, 24 Jul 2006 12:02:03 +0000 http://www.securityroundtable.com/?p=12#comment-13 I have enjoyed listening to your discussion on whether and when to disclose vulnerabilities to the public. I recommend the article "Is finding security holes a good idea?" by Eric Rescorla. He is taking an objective take on the issue looking at a cost analysis of the different scenarios. I have enjoyed listening to your discussion on whether and when to disclose vulnerabilities to the public. I recommend the article “Is finding security holes a good idea?” by Eric Rescorla. He is taking an objective take on the issue looking at a cost analysis of the different scenarios.

]]>