Comments on: about ten days at black hat

By: Be:Fox » Chez Mozilla la sécurité n’est pas un jeu !

Be:Fox » Chez Mozilla la sécurité n’est pas un jeu ! — Tue, 07 Aug 2007 18:51:52 +0000

[...] Mike Shaver signifie par là que Mozilla est « capable de sortir un patch rapidement pour toute faille critique si c’est jugé nécessaire », mais il n’a aucunement voulu dire que Mozilla suit une politique selon laquelle tout correctif doit sortir dans les 10 jours suivant la découverte de la faille. [...]

By: Mozilla security patches coming as soon as f***ing possible : Mozilla Links

Mozilla security patches coming as soon as f***ing possible : Mozilla Links — Tue, 07 Aug 2007 14:28:50 +0000

[...] And this is Mike’s version: “I was intending to express my confidence in our ability to turn around a fix quickly if we needed to, by giving him a sort of “admit one” ticket for a disclosure that he thought needed an especially fast response due to extreme risk or some such. That was a bit overzealous, in the cold light of hindsight, but at no point did I intend to indicate that Mozilla policy was a ten-day turn around on all disclosed vulnerabilities.” [...]

By: Security Tips » Mozilla Clarifies Ten Day Claim

Security Tips » Mozilla Clarifies Ten Day Claim — Tue, 07 Aug 2007 12:18:17 +0000

[...] Shaver clarified the point on his blog to quell the rumors: [...]

By: Peter

Peter — Tue, 07 Aug 2007 03:45:17 +0000

Don’t let the media trolls get to you. It’s quite common knowledge that their “news” comes from only two sources, company media kits, and toeing to the line of advertisers. Who is the biggest advertiser in computer journals? And by any chance do they have a web browser with a poor security track record?

By: Anonymous Coward

Anonymous Coward — Tue, 07 Aug 2007 02:37:01 +0000

Don’t worry about it. People are oh so politically correct and sensitive these days. Come on, people, Mike was only playing!

By: hackademix.net » Ten, they can! (if they want)

hackademix.net » Ten, they can! (if they want) — Mon, 06 Aug 2007 21:09:27 +0000

[...] It’s official, Window Snyder didn’t like the 10FD story. Mozilla’s new policies and restrictions over Mike Shaver’s business cards have not been disclosed yet. [...]

By: Social Networks: Facebook challenges Craigslist for the couch-surfing market » TechAddress

Mon, 06 Aug 2007 20:45:09 +0000

[...] Mike Shaver, an executive at Mozilla, maker of the popular Firefox browser, promises a ten-day turnaround on bugs, and then backpedals furiously. [ha.ckers.org] [...]

By: Virtual Worlds: BBC gets schooled by videogames » TechAddress

Virtual Worlds: BBC gets schooled by videogames » TechAddress — Mon, 06 Aug 2007 20:36:58 +0000

[...] Mike Shaver, an executive at Mozilla, maker of the popular Firefox browser, promises a ten-day turnaround on bugs, and then backpedals furiously. [ha.ckers.org] [...]

By: In Brief: Mike Shaver, an executive at Mozilla, maker … » TechAddress

Mon, 06 Aug 2007 20:33:03 +0000

[...] Mike Shaver, an executive at Mozilla, maker of the popular Firefox browser, promises a ten-day turnaround on bugs, and then backpedals furiously. [ha.ckers.org] [...]

By: Mozilla says no guarantees of 10-day patch turnarounds — Security Bytes

Mozilla says no guarantees of 10-day patch turnarounds — Security Bytes — Mon, 06 Aug 2007 19:55:08 +0000

[...] Shaver also has posted a blog entry about the ten-day claim, saying he overreacted to the situation. “That was a bit overzealous, in the cold light of hindsight, but at no point did I intend to indicate that Mozilla policy was a ten-day turn around on all disclosed vulnerabilities. People are reading the conversation and Robert’s post that way, but that’s not our situation, and it certainly wasn’t my intent to give that impression. I apologize, and hope that nobody will think less of Mozilla because of my error. We don’t issue challenges, and nobody here thinks that security response is a game. This was a personal bargain and overwrought showmanship from a late-night Black Hat party that has now taken on a life of its own, and I hope the fracas about my overzealous comments to Robert don’t overshadow the great work that people on the Mozilla project do to keep our users secure.” [...]