In yesterday’s patches from Adobe, it was interesting to note the following in the acknowledgments section:

Tavis Ormandy of the Google Security Team

Indeed, if you read through Tavis’ collection of exploit reports, you’ll find he’s frequently requesting acknowledgement as “Tavis Ormandy of the Google Security Team” or “Tavis Ormandy of Google, Inc.”

It seems that when Tavis feels like responsibly disclosing exploits and working to protect people, he chooses to be acknowledged as a Google employee. But when he chooses to irresponsibly disclose and work to infect people, he petulantly claims that his actions do NOT relate to Google.

Personally, I don’t think you can have it both ways. Pick your team, Tavis. Or better yet, Google pick your team.

Read Full Post

Tavis Ormandy Chooses When Google or Not originally appeared on About.com Antivirus Software on Wednesday, June 30th, 2010 at 12:21:29.

Permalink | Comment | Email this

View full post on About.com Antivirus Software

Related posts:

1. Ormandy / Google: How Close is Too Close?
2. Irresponsible Disclosure
3. Ormandy’s Exploit Leads to Malware
4. Police Raid Google Korea
5. Simple Mac Security Tweaks