full-disclosure

Open Source and information security mailing list archives

From: core at bokeoa.com (Charles 'core' Stevenson)
Subject: On sf sell out

Er... please disregard that last e-mail it was sent to the list on 
accident. If you're interested in joining our small list and develop 
exploits feel free to contact core-owner@...ps.english.org since I spilt 
the beans.

best regards,
core

Charles 'core' Stevenson wrote:
> Georgi,
> 
> Hi I've always admired your work :) Especially the AIX shellcode.. 
> anyways I just thought I would write you to inform you of a small time 
> for exploit developers only mailing list. So far we have about 10 well 
> reputed exploit developers on our list. And that's it! No security 
> consultants, pen-testers, script kiddies... the URL is here. excuse the 
> pop-up; I've found friendly hosting for the list but not the page yet :)
> 
> http://www.crosswinds.net/~zerodaydigest/
> 
> Please take a look at the charter. Anyways, we'd all love to benefit 
> from your wide range of exploit development expertise!
> 
> best regards,
> core
> 
> Georgi Guninski wrote:
> 
>> Here are my 2 stotinki on Securityfocus's sell out.
>>
>> I don't mind aleph1 & co. taking $75M. What I am concerned what price we
>> shall pay for it. ($75M is too much for collecting other people's 0days,
>> IMHO)
>>
>> What scares me about Securityfocus is that since the beginning 2002
>> they started not posting some of my posts to bugtraq but seem to post
>> "politically correct" messages.
>>
>> They went so far to not post a real vulnerability  [1](later 
>> indirectly confirmed by Microsoft in a bulletin, not fixed yet).
>> Then I decided - no 0days for securityfocus and started posting only
>> comments and opinions, mainly on the topic of full disclosure.
>> Most of them didn't get to the list, though the opposite of my 
>> opinions were
>> posted.
>>
>> Hope they don't turn into mainstream media outlet and use the power of
>> moderation for labelling people and ideas as good and bad in their user
>> base.
>>
>> Note: I don't mean to whine for them moderating me down, it is their 
>> right
>> to do whatever they want with their mailing lists, but think this 
>> should be
>> publicly known.
>>
>> [1] http://www.guninski.com/signedactivex.html (also check ver. 2.0)
>>
>> Georgi Guninski
>> http://www.guninski.com
>>
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Full-Disclosure@...ts.netsys.com
>> http://lists.netsys.com/mailman/listinfo/full-disclosure
>>
>>
> 
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Full-Disclosure@...ts.netsys.com
> http://lists.netsys.com/mailman/listinfo/full-disclosure
> 
> 

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives