Behind the Masq: Yet More DNS and DHCP Vulnerabilities

Re:Behind the Masq: Yet More DNS and DHCP Vulnerabilities by viraptor on Monday October 02, 2017 @05:44PM (#15388224)

> If these vendors were contacted before release, they may be able to keep people safe at publishing time.

You mean if hundreds of the popular vendors were notified for a coordinated release? And you think that's not making the exploit effectively public? Even skipping possible monitoring of emails, I don't expect that the set of blackhats and employed security engineers have no common elements.

[ Parent | on HN ]

Re:Behind the Masq: Yet More DNS and DHCP Vulnerabilities by abugher on Tuesday October 03, 2017 @02:43AM (#15390635)

Good point. Does that mean there should be zero coordination? What about coordinating with the security teams for a few big Linux distributions? That would be a much smaller list of people, and might make it easier/quicker for some commercial vendors to get fixed once the public announcement is made.

[ Parent | on HN ]