full-disclosure

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [thread-next>] [month] [year] [list]

From: dcopley at eEye.com (Drew Copley)
Subject: RE:

 

> -----Original Message-----
> From: Robin Landis [mailto:rebl@...ramail.com] 
> Sent: Thursday, July 01, 2004 11:26 AM
> To: Drew Copley
> Cc: bugtraq@...urityfocus.com; 
> full-disclosure@...ts.netsys.com; ntbugtraq@...tserv.ntbugtraq.com
> Subject: 
> 
> -> The very same people are finding these big bugs. It is not 
> like there are a whole ton of unexperienced people finding 
> these bugs. These are the best. They are experts at finding 
> them. They may not always be cognizant of this themselves, 
> the act of finding them may not seem difficult to them, but 
> it is -- and this is clearly shown by the fact that the same 
> people keep finding these bugs.
> 
> I contend that the fact that the very same people are 
> reporting bugs does not mean that they are the only ones 
> finding them.  Nor does it mean that only an expert might 
> find them.  Nor does it mean that all experts would be 
> inclined to report them.

Great. Based on what evidence.