Finding Linux Bugs Before they Become Exploits (internetnews.com)
Posted Jul 28, 2009 17:44 UTC (Tue) by
bcopeland (subscriber, #51750)
In reply to:
Finding Linux Bugs Before they Become Exploits (internetnews.com) by jamesmrh
Parent article:
Finding Linux Bugs Before they Become Exploits (internetnews.com)
I've read the license for the Scan account, and it's not clear to me whether I should agree to it; e.g. if they find a vulnerability I may then not able to discuss it publicly because it's part of their IP.
I understand their intent, but it also scared me away from signing up. Supposing I wanted to put a lot of work into sparse or some other static checker, I fear that having a Coverity account might taint that effort. Especially if their IP extends to "class of bugs we search for."
I wonder how many other developers stay away for similar reasons.
(
Log in to post comments)