bugtraq - RE: PivX Advisory MK002A Intuit TurboTax Information Disclosure V ulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 13 Mar 2003 11:51:40 -0500
From: Jeremy Epstein <jeremy.epstein@...methods.com>
To: Mike Kristovich <mkristovich@...x.com>, bugtraq@...urityfocus.com
Subject: RE: PivX Advisory MK002A Intuit TurboTax Information Disclosure V
	ulnerability

Calling these "security advisories" is really misleading.  I keep some of my
financial calculations in Excel spreadsheets and even in text documents.
Does that mean you'll be issuing a security advisory on Excel or emacs next?
And heaven knows, these files are stored in files on disk drives... will you
be issuing a security advisory that disks present a risk?

I'm having a hard time seeing any value to these "disclosures" other than if
the goal is to get press attention.  Running P2P sharing is the risk; these
are examples of why people who choose to use P2P need to be cautious of what
they share.