full-disclosure - Security & Obscurity: First-time attacks and lawyer jokes

lists.openwall.net		lists / announce john-users owl-users popa3d-users / xvendor oss-security / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4
Open Source and information security mailing list archives

Order Openwall GNU/*/Linux 2.0 on a CD with delivery worldwide

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

From: guninski at guninski.com (Georgi Guninski)
Subject: Security & Obscurity: First-time attacks and lawyer jokes

On Thu, Sep 02, 2004 at 12:24:29PM -0400, Peter Swire wrote:
> ......  In talking
> with people who write software, however, I was repeatedly struck by
> their observation that it takes considerable hard work and expertise to
> find new vulnerabilities....................

darling, 

you are missing the point.

i can't sing, but this does not make singing a hard (NP) problem.

what do you expect, the developers to say: "we are so fuckingly lame, so any
nonstandard kid from a third world country can fuck us hard"?.

for the sake of the argument, let's assume there are as low as 10^6 bugs in m$
warez. to take over the world (and in particular any target thereof) a kid
needs as low as 10^2 or even 10 or even 1 exploits. 
any "real world" ('tm' of god) analogies?

-- 
It's better to be a pirate than join the navy. -- steve jobs