[Full-disclosure] Fwd: NDA & SOX?
grisu at guru.at
Fri Mar 11 09:35:59 GMT 2005
Listening to a presentation on Thursday I wondered about the follwing thing:
SOX (Sarbanes Oxley Act 2004) forces the disclosure of information which
could be relevant to investors (very short form).
For example: If a manufactorer of cars gets to knowledge of a certain
weakness in his cars, he has to call them back and inform the public
IMMEDIATLY about that thing.
If a manufactorer of software gets to knowledge of a certain weakness
(vulnerability), does he have to inform the public immediatly?
Is it even worse, if the manufactorer forces everyone, who has knowledge
about that thing, to sign NDAs?
What do you think about that?
Please excuse my bad english.
Full-Disclosure is hosted and sponsored by Secunia.