This whole incident by cisco has just given itself more bad PR. It would have been just fine, if cisco didnt do anything and let a patch out ASAP, instead of going through all this. Let’s face it – The information is out anyway, people are even more eager to crack cisco, cisco got some really bad press and the whole thing just looks plain ugly for ISS as well.

i dont wish to challenge any one’s knowledge here, nor want to be disrespectful to the community that is pretty strong on web, but I reckon Cisco is justified in stopping the guy. The vulnerability discovered in routers does not lead to mass password cracking around the world, but does lead to anxious customers who then want to question their trust in Cisco. It’s not about how Lynn can be a storm that may destroy a company like Cisco’s reputation, but about a company who wishes to think beyond black hat community blackmailing them with stuff.
Just to refresh the incident when someone leaked the so called config of Pix firewall and threatened to sell on ebay for 16K.
I think Cisco will stop things from happening, and is justified in doing so. And please, freedom of speech / expression does not permit abuse of technology to harm someone’s reputation. Not that it would affect it.

- sumeet

No, only in the software we use for authenticating users on our site.

ROFL.

)