full-disclosure - GREENAPPLE Release

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: loptr.chaote at gmail.com (Loptr Chaote)
Subject: GREENAPPLE Release

On Fri, 11 Feb 2005 19:20:11 -0500, Byron L. Sonne <blsonne@...ers.com> wrote:
> > This is a quick announcement that the recent Microsoft patch (MS-05- has
> > fixed a vulnerability I found a while back in SMB.
> 
> This vuln that you found 'a while back', did you mention anything about
> it then or have you just conveniently kept it to yourself until now?
> Doesn't sound like full disclosure to me.
> 

I thought Full Disclosure propagators actually endorsed waiting for a
vendor to fix the vulnerability before announcing a security hole..

On the other hand what do I know? My hat is black.

-LC