full-disclosure - Re: Linux Privilege Escalation exploits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Tue, 18 Jul 2006 16:42:35 -0700
From: "Christian Swartzbaugh" <feofil@...il.com>
To: Tim <tim-security@...tinelchicken.org>
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Linux Privilege Escalation exploits

> It is better to provide concise, complete, and accurate information
> about vectors of attack and the potential results of those attacks to
> allow people to make their own decisions.

Ratings are useful assuming they use distribution of the software and
the potential for damage as the biggest factors. This information
gives you an idea of how big an impact it could have and how many
computers are affected.

You could let people decide for themselves, but the amount of alerts
is too overwhelming for most people and it makes sense to limit what
they can see based on the risk it causes to them based on an estimated
threat level for the bigger picture.

feofil

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/