Re: Bug#129604: general: Social Contract: We Do Hide Problems

[Adam Majer <adamm@galacticasoftware.com>]

On Thu, Jan 17, 2002 at 01:50:26AM +0100, martin f krafft wrote:
> also sprach Julian Gilbey <J.D.Gilbey@qmul.ac.uk> [2002.01.17.0120 +0100]:
> 
> as a system administrator, i'd much rather know about everything! if the
> security patch isn't available right then, then i simply disabled the
> service until then. period.
> 
> > The delays are usually short, about 2-3 weeks or so, and as long as
> > the compromise is kept very quiet for that limited period while a
> > patch is developed, everyone is usually better off for it.
> 
> not true. kept very quiet doesn't exclude someone else finding it.

But it might keep Security team and others from finding it....