[Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS)

Paul Schmehl pauls at utdallas.edu
Sat Jan 1 20:18:47 GMT 2005


--On Thursday, December 30, 2004 9:36 AM +0000 Barrie Dempster 
<barrie at reboot-robot.net> wrote:

> I'd have to agree with the eEye statement on this one. You sent out an
> advisory without disclosing the details, which offers no real benefit to
> anyone. Many people consider this responsible disclosure but that also
> requires you to notify the vendor (there were no @eeye.com's in your
> "to" list but there were a couple of press mailboxes).

Your entire post could be classified as casting perls before swine.

Paul Schmehl (pauls at utdallas.edu)
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu



Full-Disclosure is hosted and sponsored by Secunia.