Security threats Toolkit
Story: Flaw found in Nortel's VPN client
How is this "returning to the drawing board"??? I don't know anything about the internals of the involved, but it seems to me that it ought to be a trivial matter to disable the password save option. To call that a return to the drawing board seems a bit overboard. To me "returning to the drawing board" implies throwing out the old design and starting over. I don't think that is what is needed here. Perhaps this is a case of overstating the problem to attract attention?
Full Talkback thread









