Zero day flaws?

OK... This is where I will attempt to educate a certain population of journalists about terminology.

I keep reading about impressive new zero day flaws that are present in this or that product... So for the record, I'd like to go over this once again...

The term "zero day" doesn't apply to faults, vulnerabilities, bugs or holes. It applies to attacks and exploits.

A "zero day" exploit / attack is one that is present on the day that a fault it leverages is disclosed. That's why they are called zero day. Because they appear on that day. Not 1, 2, 3 or more days after...

What would a "zero day fault" be? It would be one that is announced the day it is announced... pretty dumb if you want my take on it.

So could all those journalists in need of sensationalism stop using the term "zero day flaw" which means nothing, and concentrate on proper facts, and their correct naming?

We now return to our original programming...

Comments:

I don't see the reaseon not to use this term... There are lot of useless and partly useless terms

Posted by Car hire on March 24, 2010 at 03:01 AM CET #

The reason is that a journalist's job is to give information, correct information. And to verify her facts.

Using the term "zero day flaw" just highlights the serious misunderstanding of what they are talking about and destroys their credibility.

Posted by Gilles Gravier on March 24, 2010 at 03:06 AM CET #

Post a Comment:
  • HTML Syntax: NOT allowed
About

gravax

Search

Archives
« April 2014
SunMonTueWedThuFriSat
  
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
   
       
Today