full-disclosure - full disclosure discussion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: guninski at guninski.com (Georgi Guninski)
Subject: full disclosure discussion

dev-null@...id.com wrote:

> There was a discussion about full-disclosure over at slashdot yesterday.
>
> "http://slashdot.org/articles/02/11/19/174214.shtml?tid=128"
>
>
> --
> This message has been sent via an anonymous mail relay at www.no-id.com.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
The wired story is quite funny.
"...A Microsoft spokeswoman said the Microsoft Security Response Center 
investigated the security hole as soon as it was reported...".
So microsoft don't have the guts to bash, but use Richard M. Smith, hehehehe.
It is interesting to note that this year Richard M. Smith posted full disclosure 
detail about a security/privacy bug - check 
http://www.theregister.co.uk/content/4/23700.html
(bugtraq disaproved my post about mentioning this fact back then)
Why this man don't put his money where his mouth is (or whatever the saying was) :)

Georgi