Interview: Jennifer Granick’s Take On ‘Ciscogate’

Michael S. Mimoso of Information Security Magazine writes:

“Ciscogate,” the summer’s high-profile security event between former ISS researcher Mike Lynn and Cisco Systems Inc. over the disclosure of a flaw in the IOS router operating system, stirred heavy emotions around responsible vulnerability disclosure and whether there is security in obscurity. Lynn’s attorney, Jennifer Granick, is an advocate of responsible disclosure. She provides some perspective on this case and what issues it may raise for the future of cyberlaw.

What has this case done for full disclosure advocates?
It’s one of those situations that has gotten people talking about it. My view is skewed because it happened at Black Hat, where most are advocates of disclosure. Most in the security community feel the amount of information Mike disclosed was completely responsible. In fact, some would say it was not full disclosure; it would have been if he had released exploit code. He explained the problem.

[Continue reading Interview: Jennifer Granick's take on 'Ciscogate']