full-disclosure - Re: I have fixes for the Geeklog vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: jsage at finchhaven.com (John Sage)
Subject: Re: I have fixes for the Geeklog vulnerabilities

uh..

On Tue, Oct 07, 2003 at 02:05:36AM +0530, morning_wood wrote:
> > "Any security disclosure is good..."
> > >A wonderfully naive attitude.
> > >Ever hear of lying? Disinformation? Libel? FUD?
> > >Or simply of someone being wrong?
> > >"Disclosure" without any technical evidence is gossip at best.
> > >Unfortunately, there are some who will believe almost anything they
> > ?read.
> 
> I dont agree about false items being posted... 

nah.. you're right.. never happens!

> get mature and quit nitpickin'

Nitpicking, yeah, why should we worry about the validity of something
posted to a mail list, particularly when so many people hide behind a
hotmail or yahoo! address. Certainly they're the most reliable and
authoritative. 

And remember, when in doubt:

"I read it on the Internet. It must be true."



- John
-- 
"You are in a twisty maze of weblogs, all alike."
-
John Sage: InfoSec Groupie
-
ABCD, EFGH, IJKL, EmEnOh, Pplus+, Mminus-
-
ATTENTION: this entire message is privileged communication, intended
for the sole use of its recipients only. If you read it even though
you know you aren't supposed to, you're a poopy-head.