>> I'm not really for the 8lgm concept completely, but at least [...] > 8lgm [...], unlike CERT where [...] Folks, This is bugtraq. It's for discussion of bugs. If you want to discuss the pros and cons of varying levels of disclosure, there's a list specifically for the purpose (disclosure@elmegil.bradley.edu, with the usual -request convention for requests). Take it there. Please. der Mouse mouse@collatz.mcrcim.mcgill.edu