[29291] in bugtraq
RE: PivX Advisory MK002A Intuit TurboTax Information Disclosure V
daemon@ATHENA.MIT.EDU (Jeremy Epstein)
Thu Mar 13 13:28:07 2003
Message-ID: <A60F0CBF368CF740A613EB1F262B8602F094A3@maileast>
From: Jeremy Epstein <jeremy.epstein@webmethods.com>
To: Mike Kristovich <mkristovich@pivx.com>, bugtraq@securityfocus.com
Date: Thu, 13 Mar 2003 11:51:40 -0500
MIME-Version: 1.0
Content-Type: text/plain
Calling these "security advisories" is really misleading. I keep some of my
financial calculations in Excel spreadsheets and even in text documents.
Does that mean you'll be issuing a security advisory on Excel or emacs next?
And heaven knows, these files are stored in files on disk drives... will you
be issuing a security advisory that disks present a risk?
I'm having a hard time seeing any value to these "disclosures" other than if
the goal is to get press attention. Running P2P sharing is the risk; these
are examples of why people who choose to use P2P need to be cautious of what
they share.
