Re: What to do if they ignore you

Paul Schmehl <[email protected]>
Newsgroups gmane.comp.security.incidents
Message-ID <[email protected]>
--On Wednesday, April 13, 2005 11:50:16 PM -0400 "Byron L. Sonne" 
<[email protected]> wrote:
>
> I believe David gravely injured him and was taken far more seriously
> after that.
>
> Perhaps publish the offending address information... if you're getting
> that kind of behaviour originating from their net, I'd wager they have
> other problems and might be more easily exploitable than some other
> address. There are people out there who would appreciate and make use of
> that kind of info. Maybe pick the appropriate high visibility mailing
> list or irc channel.
>
While perhaps personally satisfying, I believe this is very poor advice. 
Goliath just might decide that your publishing his exposure to risk put him 
at greater risk, and he might decide that *you* should be personally sued 
to compensate him for the results of that exposure.

Paul Schmehl ([email protected])
Adjunct Information Security Officer
The University of Texas at Dallas
AVIEN Founding Member
http://www.utdallas.edu

--------------------------------------------------------------------------
Test Your IDS

Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from 
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708 
to learn more.
--------------------------------------------------------------------------
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.