Subscriber Discussion

"Don't Report Any Vulnerabilities To NIST Concerning Software We Sell, Because Our Competitors Who Use Other Software Will Use The CVE Against Us."

UI
Undisclosed Integrator #1
Jan 15, 2024

Here's a question: Just how cutthroat is the security business? I've heard things over the years, but I don't know how accurate they are.

NOTICE: This comment was moved from an existing discussion: Integrator Does Not Report Robbery Because "Bad For Business". Smart Or Foolish?

JH
John Honovich
Jan 15, 2024
IPVM

#*, * **** **** *** *** discussion ******* * ***** **'* ********* to *********. *'** ***** *** ****.

*** *** ****** ** ***, * few ***** ***, ********* ******** *** cybersecurity ********* ** *** *** *** lowest *** *****, *.*., *** ***** CVEs *****, *** ****** **** ***** a *******'* ************* **.

** ******, ** **** *****, **** approach ******** *** *** ******* ***** it ***** ********* ******* *** ********* of ******** ********** ***************.

(1)
(1)
UI
Undisclosed Integrator #2
Jan 16, 2024

***** ** ****** **** ************* *** more ** **** *** ***** ** they ****** ********* *****.

UI
Undisclosed Integrator #3
Jan 16, 2024

* *****'* **** **** **** ** attitude ** *** ** *** * national *********** **** * **** ****** at, ******** ******* ** **** ****** much ***** ******. *** * **** I ***** ** * ************ ****** they ******'* ****** *************** ** ****** either ******** ** *********. ** **** in *****'* ***** *********** * ************ with **** **** ** ******** ***** be ** ********* **************** *** ****** use. ****'* *** ** *** *** attitude *****'* ***** ****** *** * would *** ** ********* ** **** it.

JH
John Honovich
Jan 16, 2024
IPVM

*** ******* *******, *** ********* **** engage ** **** ********* **** ** be ********.

*'** **** ***** **** * *** security ******** ***** **** ***** ************* will ******** **** ** **** *************** but ******* **** ** **** ** NDA *** ******** *** *************** ***** from ***** ********* ********. *** **** underlying ****** - **** **, ******** CVE *********** **** ***** ** **** against ****.

(1)
UI
Undisclosed Integrator #3
Jan 16, 2024

* ***** ***** **** ****** ******** a ******** ******** **** ***** ******* such ** *** ** **** **** can ******* *** **** *** *** and ******* ** *********. * **** cynical **** ***** ** **** **** want ** ******* ********** ** **** when **** ** ******* **, **** also **** * *** ** **** limit * ********* ******** ********. *** disputing **** **** ********* **** ***** the *** *** * ***'* ***** the ******** ** *** *** ** itself ** ** ********* ** ********* nefarious.

JH
John Honovich
Jan 16, 2024
IPVM

* *** **** ******** *** *** for *********** ** ******** ***** **** was **** ** *** **** ** file * *** ** ***, *** simply ** ******* **** *** *** was *********.

UI
Undisclosed Integrator #3
Jan 16, 2024

*** * *** ***, **** ****** hope **** ***** **** ******, ******* with *** ******* ***** ** ******** technology ****** ** ** **** ********, those ***** **** ** **** ****** dead ** *** ***** *** *** enterprise *****.

(1)
JH
John Honovich
Jan 16, 2024
IPVM

***, ***, * ***** ****'* **** some ***** *** ******* **, **** it ***** **** ****** ******. ******* these ****** *** ****** ** *** simple. ***, ****** **** **** ******* to ****,****** *********** ******* *** ******* ** *********@****.***

Avatar
Steve Bell
Jan 19, 2024

*********** ********** #* ******** *** ** work **** *** ******** ***** ******** companies. ** **** *** ******** ******** to **** *** *** *** ******** before **** *** ** ******, *** of ****** **** *** ** * NDA, *** *** ****** ***** **** would **** ** * *** **** be ***** ****** **** ******* ** the ******* ** ***** *** ******* a ***.

*** ** **** ****** ******** ** several ******** ******** ******** ********* *** we **** *** ** *** **** most ** ***** ********* *** ** Undisclosed ********** #* ******** *** ****** is ** ***** ** ** *** the *************** ****** *** *** ** published. **** ****** *** **** **** an ***** *** ** ********* ***** to * *** ***** *********.

* ***** ******* **** *** ****** of ***'* ********* ** ********* ************ to *** *** ***** ****** *** product **. **** **if * ****** ********* * *** ** ***'* **** *** ******** **** ****** **** * ****** *** ********* **** ***!

*** **** ** **** ******** ************ and ********** *** *** *** ******** we ***** ******* ***** *** **** likely **** *************** *** ** ** the ****** *** *** *********** *** the ******** ** ***** *** ***** be *** ** *** ***** ******** such ** *** ***** ******* (******* our ******* *** *** *** *****)

JH
John Honovich
Jan 19, 2024
IPVM

*** ****** ***** **** ***** **** as * *** **** ** ***** before **** ******* ** *** ******* so ***** *** ******* * ***.

****, ****'* ********* **********. ** *******, I ** ******* ***** ********** ******** where *************** *** ***** ***** *** product *** **** ** ********** *** a *****.

if * ****** ********* * *** ** ***'* **** *** ******** **** ****** **** * ****** *** ********* **** ***!

* ***** ** * ******* **** of ***** ****'* ******** ****. **'* like * ****** *** ***** ****** a *******, **** ******* **** ***'*, doesn't **** **** ****'* ****** *** (and **** *** ** ****** * lot ****).

AM
Alastair McLeod
Jan 19, 2024

** *** **, ********* **** ** Cyber **********, ***** ********** **** *** CAPPS (***** ******* ******** ******** *******) set ** *** ** ********** ******* a ********* *********** *** ********* ******* to **** * ******* ** ***** website **** *** ******’* ************* ********** policy.

*********** ** **** ** ***** ********* can ** ***** ****:

****

*****://***.****.***.**/*****-*********-********-********-*******-*****

*** ******* ** * ********** ****** from *** *******, ********, *** ** found ****

******* ********** | ********

***** ********* *** ********* ** **** some ************* *********** *** * ******* our ******** ***** ******* **** ************** of ******* ******** ** ***** ***********.

New discussion

Ask questions and get answers to your physical security questions from IPVM team members and fellow subscribers.

Newest discussions