bugtraq - Re: RE: [Full-Disclosure] Snort not backdoored, Sourcefire not compromised

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: 22 Sep 2003 12:11:56 -0500
From: Matt Schillinger <mschilli@....fsi.com>
To: daniele@...cetta.com
Cc: exibar@...lair.com, roesch@...rcefire.com,
   full-disclosure@...ts.netsys.com, snort-users@...ts.sourceforge.net,
   snort-devel@...ts.sourceforge.net, bugtraq@...urityfocus.com,
   incidents@...urityfocus.com
Subject: Re: RE: [Full-Disclosure] Snort not backdoored,
	Sourcefire not compromised


On Mon, 2003-09-22 at 08:01, Daniele Muscetta wrote:
> > I knew it wasn't true :-)
> 
> Yeah, me too, it smelled very fishy as from the beginning.....
> 
> What's even worse is that this kind of FAKE full-disclosure actually does
> not even target the security industry it SAYS it wants to target...
> These "supposedly dangerous" blackhat do not even behave the way they
> say... they declare war to the security INDUSTRY... and then they attack
> SNORT, which is actually the ONLY free thing available in the IDS
> landscape (and moreover IT IS such a GREAT product !).
Just so the facts are straight, Prelude-IDS is also Open Source
(www.prelude-ids.org)


> Who does this FUD advantage ?
> The blackhat they say they are? It does not really look like it would be
> of any help to them... (I think the bad guys might be using snort
> themselves, as they surely don't buy expensive commercial products...)
> Or does it rather give an advantage to the security industry itself....
> those people that would SELL their expensive products more if only snort
> would not exist... ??If these "supposed" blackhats really were against the security
> industry.... why would they target the nice guys who dispense resources
> and awareness for free, being REALLY concerned about the overall security,
> rather than who makes money with it ?
> This crap was obviously just FUD...
> 
> 
> 
> >  Although I did think the phrack 62 was real until I actually took the
> >  time to read some of it after getting some sleep.
> 
> The layout is copied very well indeed...
> 
> 
> >  Thanks for the official statement Marty and keep up the great work
> >  with Snort!
> 
> Right !
> Keep up the great work !
> An applause to Marty & C. who provide the world with such a fine product
> for free, and an applause to the honeynet project who TEACHES people
> security and forensics for free ! BRAVO !
> 
> Best Regards,
> 
> Daniele Muscetta
> 
> 
> 
> "Just 'cause the brainwashing is free, doesn't mean you /have/ to take
> one..." (copied from someone on this or another list...)
> 
> 
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf
> _______________________________________________
> Snort-users mailing list
> Snort-users@...ts.sourceforge.net
> Go to this URL to change user options or unsubscribe:
> https://lists.sourceforge.net/lists/listinfo/snort-users
> Snort-users list archive:
> http://www.geocrawler.com/redir-sf.php3?list=snort-users
-- 
Matt Schillinger
System Administrator
FlightSafety International
mschilli@....fsi.com
314-551-8403




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@...ts.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users