Pete Finnigan's Oracle Security Weblog

Alex let me know about a post by David on the Bugtraq mailing list that sets the record straight about his own issues with Oracle and bugs at last years Black Hat conference. The post is titled "Oracle and setting the record straight". Basically David is saying that it has been reported in a few places in the last few days because of Alex's advisories that David supposedly did the same thing a Black Hat last year. David did not release any information about unfixed bugs last year at Black Hat. Read the full bugtraq post for the background to this. I have not re-read my own posts here but I think I am also probably guilty of propagating the myth that he did release information - If I did then I apologise to David for this error.