full-disclosure - Re: not telling enough

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Aug 18 21:25:02 2005
From: bet at rahul.net (Bennett Todd)
Subject: Re: not telling enough - ethics

dictionary.com says of "ethics":

  + A set of principles of right conduct
  + A theory or a system of moral values

"Right conduct" and "moral values" depend on context and conditions,
they aren't absolute. Today, the ethics of publicly traded
corporations are easy to sum up: make as much money as possible
right now. That's it. The future is someone else's problem. The
phrase "responsibility to our investors" is used in the same way as
"I was just following orders".

We, as security professionals, can and should model our own behavior
on our own ethics; expecting companies to follow ethics that are
palatable to us is unrealistic.

-Bennett
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050818/1e9f294f/attachment.bin