full-disclosure - David Litchfield talks about the SQL Worm in the Washington Post

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: rms at computerbytesman.com (Richard M. Smith)
Subject: David Litchfield talks about the SQL Worm in the Washington Post

Hi,

The following quote from David Litchfield appeared in a front-page
article in today's Washington Post:

   http://www.washingtonpost.com/wp-dyn/articles/A57550-2003Jan28.html

   "You have this ideal vision of doing something 
   for the greater good," said David Litchfield, 
   managing director of Next Generation Security 
   Software Ltd. of London, who acknowledged that 
   a small bit of his code might have been used in 
   the attack. "I will probably no longer publish such code." 

Perhaps David can put together a longer message for Bugtraq and
Full-Disclosure on his changing views of publishing proof-of-concept
code for security vulnerabilities.

Richard M. Smith
http://www.ComputerBytesMan.com