Hacker News Reader

This is how you do a security alert. Notify the manufacturer of the software, notify the press so it is made public and thus people will install updates, and keep the details secret until it's fixed. Kudos to the discoverer.

View on HN

You know, it's a bit of FUD since I have no workaround/prevention angle.

Great. I run skype on one of my machines (OSX) and it's now vulnerable...

Our solution is "Use Google Talk until it's resolved".

sadly no screen/desktop sharing

with either intended or unintended partners, hmm?

iChat works well for that.

Check out showscreen.com - it's better than Skype I reckon

Unfortunately, it's not so simple. Alerting the public before a fix is out is a double-edged sword: it also means malicious attackers have a chance to replicate the finding and abuse it.

Then perhaps the flow should be amended: Alert the public after the fix, or after a week, whichever is the earlier.

Reply on news.ycombinator.com