Re: [Full-disclosure] FYI: Pay for disclosure

2006-08-02 Thread Cory
I personally feel the deal should be: Give the vendor 30 days of exclusive rights to purchase the data. After which, it is made available to all buyers. John Dietz wrote: I agree, it does seem a lot like extortion the way they present it on that site, but putting myself in their shoes, I'm ha

Re: Re[2]: [Full-disclosure] FYI: Pay for disclosure

2006-08-02 Thread John Dietz
I agree, it does seem a lot like extortion the way they present it on that site, but putting myself in their shoes, I'm having a hard time figuring a way to get paid for all my hard work without it sounding so much like extortion.  One thing for sure I would change is the 30-day deal.  The only rea

Re[2]: [Full-disclosure] FYI: Pay for disclosure

2006-08-02 Thread Thierry Zoller
Dear List, Just to be a bit more clearer, I am not opposed to being paid for the research one did, I just find it astonishing to read "If the vendor buys the analysis it is given 30 days protection for all private information included in this analysis." This sounds a bit like the mob to me, "prot

Re: [Full-disclosure] FYI: Pay for disclosure

2006-08-02 Thread Alice Bryson <[EMAIL PROTECTED]>
looks like crazy for money... 2006/8/2, Thierry Zoller <[EMAIL PROTECTED]>: Reads (partially) like a ransom : http://www.matousec.com/purchase.php -- http://secdev.zoller.lu Thierry Zoller Fingerprint : 4813 c403 58f1 1200 7189 a000 7cf1 1200 9f89 a000 ___

[Full-disclosure] FYI: Pay for disclosure

2006-08-02 Thread Thierry Zoller
Reads (partially) like a ransom : http://www.matousec.com/purchase.php -- http://secdev.zoller.lu Thierry Zoller Fingerprint : 4813 c403 58f1 1200 7189 a000 7cf1 1200 9f89 a000 ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk