full-disclosure

Open Source and information security mailing list archives

From: core at bokeoa.com (Charles 'core' Stevenson)
Subject: On sf sell out

Yeah my e-mail client doesn't even include the original posters address 
if I hit reply-all...

core

KF wrote:
> Thats exactly why I love the reply-to on this list. =]
> -KF
> 
> ----- Original Message -----
> From: "Charles 'core' Stevenson" <core@...eoa.com>
> To: <full-disclosure@...ts.netsys.com>
> Sent: Sunday, July 21, 2002 10:51 AM
> Subject: Re: [Full-Disclosure] On sf sell out
> 
> 
> 
>>Er... please disregard that last e-mail it was sent to the list on
>>accident. If you're interested in joining our small list and develop
>>exploits feel free to contact core-owner@...ps.english.org since I spilt
>>the beans.
>>
>>best regards,
>>core
>>
>>Charles 'core' Stevenson wrote:
>>
>>>Georgi,
>>>
>>>Hi I've always admired your work :) Especially the AIX shellcode..
>>>anyways I just thought I would write you to inform you of a small time
>>>for exploit developers only mailing list. So far we have about 10 well
>>>reputed exploit developers on our list. And that's it! No security
>>>consultants, pen-testers, script kiddies... the URL is here. excuse the
>>>pop-up; I've found friendly hosting for the list but not the page yet :)
>>>
>>>http://www.crosswinds.net/~zerodaydigest/
>>>
>>>Please take a look at the charter. Anyways, we'd all love to benefit
>>>from your wide range of exploit development expertise!
>>>
>>>best regards,
>>>core
>>>
>>>Georgi Guninski wrote:
>>>
>>>
>>>>Here are my 2 stotinki on Securityfocus's sell out.
>>>>
>>>>I don't mind aleph1 & co. taking $75M. What I am concerned what price
>>>
> we
> 
>>>>shall pay for it. ($75M is too much for collecting other people's
>>>
> 0days,
> 
>>>>IMHO)
>>>>
>>>>What scares me about Securityfocus is that since the beginning 2002
>>>>they started not posting some of my posts to bugtraq but seem to post
>>>>"politically correct" messages.
>>>>
>>>>They went so far to not post a real vulnerability  [1](later
>>>>indirectly confirmed by Microsoft in a bulletin, not fixed yet).
>>>>Then I decided - no 0days for securityfocus and started posting only
>>>>comments and opinions, mainly on the topic of full disclosure.
>>>>Most of them didn't get to the list, though the opposite of my
>>>>opinions were
>>>>posted.
>>>>
>>>>Hope they don't turn into mainstream media outlet and use the power of
>>>>moderation for labelling people and ideas as good and bad in their user
>>>>base.
>>>>
>>>>Note: I don't mean to whine for them moderating me down, it is their
>>>>right
>>>>to do whatever they want with their mailing lists, but think this
>>>>should be
>>>>publicly known.
>>>>
>>>>[1] http://www.guninski.com/signedactivex.html (also check ver. 2.0)
>>>>
>>>>Georgi Guninski
>>>>http://www.guninski.com
>>>>
>>>>
>>>>_______________________________________________
>>>>Full-Disclosure - We believe in it.
>>>>Full-Disclosure@...ts.netsys.com
>>>>http://lists.netsys.com/mailman/listinfo/full-disclosure
>>>>
>>>>
>>>
>>>
>>>_______________________________________________
>>>Full-Disclosure - We believe in it.
>>>Full-Disclosure@...ts.netsys.com
>>>http://lists.netsys.com/mailman/listinfo/full-disclosure
>>>
>>>
>>
>>
>>_______________________________________________
>>Full-Disclosure - We believe in it.
>>Full-Disclosure@...ts.netsys.com
>>http://lists.netsys.com/mailman/listinfo/full-disclosure
>>
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Full-Disclosure@...ts.netsys.com
> http://lists.netsys.com/mailman/listinfo/full-disclosure
> 
> 

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives