Mailinglist Archive

Disclosure survey
By Federico Biancuzzi

Federico Biancuzzi surveys statements from some of the world's largest
software companies about vulnerability disclosure, interviews two
security companies who pay for vulnerabilities, and then talks with
three prominent, independent researchers about their thoughts on
choosing a responsible disclosure process. In three parts.

http://www.securityfocus.com/columnists/415