Full disclosure requires that full details of a security vulnerability are disclosed to the public, including details of the vulnerability and how to detect and exploit it. The theory behind full disclosure is that releasing vulnerability information immediately results in quicker fixes and better security. Fixes are produced faster because vendors and authors are forced to respond in order to protect their system from potential attacks as well as to protect their own image. Security is improved because the window of exposure, the amount of time the vulnerability is open to attack is reduced.
In the realm of computer vulnerabilities, disclosure is often achieved via mailing lists such as a full disclosure mailing list and by other means.
Read more about Full Disclosure: History, Controversy
Famous quotes containing the word full:
“I sometimes have the sense that I live my life as a writer with my nose pressed against the wide, shiny plate glass window of the “mainstream” culture. The world seems full of straight, large-circulation, slick periodicals which wouldn’t think of reviewing my book and bookstores which will never order it.”
—Jan Clausen (b. 1943)