Jeff's InfoSec Blog

Thoughts about information security, privacy, and regulatory compliance. Brought to you by Jeff Newfeld, the product unit manager for security solutions in Microsoft's Core Infrastructure Solutions group.

Blogs

Is finding security holes a good idea?

  • Comments 35
  • Likes

Some interesting papers came out of the third annual Workshop on Economics and Information Security.  If you're an IEE Computer Society member you can read the full text.  Eric Rescorla's article, "Is Finding Security Holes a Good Idea?", provides a statistical analysis of a point I have long held:  that disclosure of holes is the prime driver for exploits, and that holding off on disclosure (which also means holding off on the fix) can in many cases reduce costs and improve security.  That may be counter-intuitive, but read Rescorla's paper and judge it for yourself.

S&P: Economics of Information Security

Comments
  • <p>This is gonsalez music site - &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.gonsalez.info/101036.html&quot;&gt;best">http://www.gonsalez.info/101036.html&quot;&gt;best</a> music site in da world&lt;/a&gt;.</p>

  • <p>She looked about as if seeing her living room for the first time, noticed the slanting rays of the setting sun angling through the window, &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.hollydeen.info/freetrannybond.html&quot;&gt;free">http://www.hollydeen.info/freetrannybond.html&quot;&gt;free</a> tranny bondage&lt;/a&gt; dust swirling through the shafts of light before they struck the coffee table, casting bright yellow lines across the glass surface. Her arms relaxed, hands sliding down into her lap. &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.hollydeen.info/shemongirl.html&quot;&gt;shemale">http://www.hollydeen.info/shemongirl.html&quot;&gt;shemale</a> on girl sex&lt;/a&gt; She stretched her legs out in front of her and rose from the couch.</p>

  • <p>The next Friday, I called at her flat, and rang the bell, hoping to ask her out for a drink in the nearby Rhyddings pub.&lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.hammak.info/biggirls.html&quot;&gt;big">http://www.hammak.info/biggirls.html&quot;&gt;big</a> girls with big titties&lt;/a&gt; &nbsp;(I didn&amp;#039;t go there often as I had been thrown out after having a slight tussle, with my cousin Mogs.) I was surprised when another woman opened the door, and even more to recognise that she was the Staff Nurse who had tended my burnt foot. &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.hammak.info/nakcute.html&quot;&gt;naked">http://www.hammak.info/nakcute.html&quot;&gt;naked</a> cute babes&lt;/a&gt; I had dropped a hot rhubarb pie onto it as I pulled it out of the oven during one of my attempts at cooking. I had thought her to be very attractive then and I smiled to see her now.</p>

  • <p>Lastly, server work continues to progress &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.kilokardo.info/pornmat.html&quot;&gt;porn">http://www.kilokardo.info/pornmat.html&quot;&gt;porn</a> mature&lt;/a&gt;; this week we actually reached a major development milestone in that some of our newer code was finally put to the test under the watchful eye of load-generating flamethrowers &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.kilokardo.info/hugeboobson.html&quot;&gt;huge">http://www.kilokardo.info/hugeboobson.html&quot;&gt;huge</a> boobs on milf&lt;/a&gt;, and we’re hopeful that all of the new updates will continue to hold up under stress &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.kilokardo.info/nicet.html&quot;&gt;nicetits">http://www.kilokardo.info/nicet.html&quot;&gt;nicetits</a> boy caught&lt;/a&gt;.</p>

  • <p>Scaleable from the individual sourcer all the way up to enterprise customers &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.popozilla.info/stockings.html&quot;&gt;stockings">http://www.popozilla.info/stockings.html&quot;&gt;stockings</a> and big breasts&lt;/a&gt;, help recruiting teams build referral networks, search for passive candidates, manage candidate relationships and maintain a pipeline of high quality talent &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.popozilla.info/bigboobspict.html&quot;&gt;Big">http://www.popozilla.info/bigboobspict.html&quot;&gt;Big</a> Boobs Picture Gallery&lt;/a&gt;.</p>

  • <p>Rivers are the most common land feature on earth and play a vital role in the sculpting of land &lt;ahref=&quot;<a rel="nofollow" target="_new" href="http://www.plikolama.info/tgpsoft.html&quot;&gt;tgp">http://www.plikolama.info/tgpsoft.html&quot;&gt;tgp</a> soft mature nudes&lt;/a&gt;. This program shows landscapes formed by rivers, the various types of rivers, the basic parts of a river, and how characteristics of rivers — their slope, channel&lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.plikolama.info/oldmatnude.html&quot;&gt;old">http://www.plikolama.info/oldmatnude.html&quot;&gt;old</a> mature nude&lt;/a&gt;, and discharge — erode and build the surrounding terrain. Aspects of flooding are also discussed.</p>

  • <p>When you are aware of the basic human needs, you can incorporate these needs into your writing &lt;ahref=&quot;<a rel="nofollow" target="_new" href="http://www.jupirdakol.info/blondelesbin.html&quot;&gt;blonde">http://www.jupirdakol.info/blondelesbin.html&quot;&gt;blonde</a> lesbians in bed&lt;/a&gt;. A great headline will appeal to your potential customers&amp;#039; emotions. You must feel their needs &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.jupirdakol.info/junior.html&quot;&gt;junior">http://www.jupirdakol.info/junior.html&quot;&gt;junior</a> teen nudist&lt;/a&gt;, wants and desires and write your headlines with passion and emotion.</p>

  • <p>When the water got a bit cooler, she shaved her underarms, and her legs. &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.ceety.info/tinytittys.html&quot;&gt;tiny">http://www.ceety.info/tinytittys.html&quot;&gt;tiny</a> tittys&lt;/a&gt; She stood up and turned the shower jets on and washed and conditioned her hair before finally getting out and wrapping her head and body in big fluffy towels. She was singing along with a song on the radio as she combed her hair and applied scented lotion to her body. &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.ceety.info/boobstitsbrest.html&quot;&gt;boobs">http://www.ceety.info/boobstitsbrest.html&quot;&gt;boobs</a> tits brest jugs&lt;/a&gt; After drying her hair, she quickly cleaned up the mess in their bathroom and went to her drawer to find something provocative to wear.</p>

  • <p>An adult who is enrolling in college courses with the intention of acquiring an undergraduate degree may have learned, through personal study or reading &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.okliatasso.info/guysbare.html&quot;&gt;guys">http://www.okliatasso.info/guysbare.html&quot;&gt;guys</a> bare ass&lt;/a&gt;, much of the course work for the history and literature requirements of the degree &lt;ahref=&quot;<a rel="nofollow" target="_new" href="http://www.okliatasso.info/tightassin.html&quot;&gt;tight">http://www.okliatasso.info/tightassin.html&quot;&gt;tight</a> ass in thong&lt;/a&gt;.</p>

  • <p>An adult who is enrolling in college courses with the intention of acquiring an undergraduate degree may have learned, through personal study or reading &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.okliatasso.info/guysbare.html&quot;&gt;guys">http://www.okliatasso.info/guysbare.html&quot;&gt;guys</a> bare ass&lt;/a&gt;, much of the course work for the history and literature requirements of the degree &lt;ahref=&quot;<a rel="nofollow" target="_new" href="http://www.okliatasso.info/tightassin.html&quot;&gt;tight">http://www.okliatasso.info/tightassin.html&quot;&gt;tight</a> ass in thong&lt;/a&gt;.</p>

  • <p>The term adult education conference also applies to conferences held &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.okropotlu.info/momstits.html&quot;&gt;moms">http://www.okropotlu.info/momstits.html&quot;&gt;moms</a> tits&lt;/a&gt; between educators for the purpose of sharing ideas and plans to increase the effectiveness of adult education &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.okropotlu.info/coedgirls.html&quot;&gt;coed">http://www.okropotlu.info/coedgirls.html&quot;&gt;coed</a> girls with big boobs&lt;/a&gt;.</p>

  • <p>At its most basic, adult education is defined as education for adults who have poor or no skills in basic reading, writing and math skills &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.fito.okliatasso.info/beardshav.html&quot;&gt;beard">http://www.fito.okliatasso.info/beardshav.html&quot;&gt;beard</a> shaved head&lt;/a&gt;. The lack of basic education impairs the ability of these adults to effectively function in the workplace, in the family and in society &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.fito.okliatasso.info/freepict.html&quot;&gt;free">http://www.fito.okliatasso.info/freepict.html&quot;&gt;free</a> pictures hairy cunt&lt;/a&gt;.</p>

  • <p>In order for these developments to occur, personally had to attend to the bureaucracy that stood in the way. He confronted obstinate public service workers &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.hrikalosa.info/bbwfacesitting.html&quot;&gt;bbw">http://www.hrikalosa.info/bbwfacesitting.html&quot;&gt;bbw</a> facesitting gallery&lt;/a&gt;, and successfully negotiated with the heads of private companies &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.hrikalosa.info/bbwmovie.html&quot;&gt;bbw">http://www.hrikalosa.info/bbwmovie.html&quot;&gt;bbw</a> movie free&lt;/a&gt;.</p>

  • <p>Search engines may penalize sites they discover using black hat methods, either by reducing their rankings or eliminating their listings from their databases altogether &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.esketim.info/fatnakwom.html&quot;&gt;fat">http://www.esketim.info/fatnakwom.html&quot;&gt;fat</a> naked women photographs&lt;/a&gt;. Such penalties can be applied either automatically by the search engines&amp;#039; algorithms, or by a manual site review &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.esketim.info/fatplump.html&quot;&gt;fat">http://www.esketim.info/fatplump.html&quot;&gt;fat</a> plumper bbw fta chicks&lt;/a&gt;.</p>

  • <p>There&amp;#039;s no fake &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.bigbreasts.bigtitncock.info/bigtittysuck.html&quot;&gt;big">http://www.bigbreasts.bigtitncock.info/bigtittysuck.html&quot;&gt;big</a> titty sucker&lt;/a&gt; here, all of these ladies have whopping extra &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.bigbreasts.bigtitncock.info/massboobsandhungry.html&quot;&gt;Massive">http://www.bigbreasts.bigtitncock.info/massboobsandhungry.html&quot;&gt;Massive</a> Boobs And Hungry for&lt;/a&gt; that they were gifted with! You gotta see &amp;#039;em to believe &amp;#039;em &lt;a href=&quot;<a rel="nofollow" target="_new" href="http://www.bigbreasts.bigtitncock.info/tenngirls.html&quot;&gt;Tenn">http://www.bigbreasts.bigtitncock.info/tenngirls.html&quot;&gt;Tenn</a> Girls with Big Boobs&lt;/a&gt;!</p>

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment