Examining Vendor Responsibilities in Security Bug Management

In last week The reader wrote to say that his company often sits on security bugs until they are publicly announced or until at least one customer complaint is made. Before you start disagreeing with this policy, hear out the rest of his argument.

The link for this article located at InfoWorld is no longer available.