full-disclosure - Re: Right, or wrong?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Thu, 9 Aug 2007 08:41:20 -0700
From: "J. M. Seitz" <jms@...hunter.ca>
To: "'Byron Sonne'" <blsonne@...ers.com>, <full-disclosure@...ts.grok.org.uk>
Subject: Re: Right, or wrong?

I would be interested to hear the responses from software vendors who are
lurking on the list. Is it in your best interest to hush-hush it and fix the
bug silently? 

In the real estate market you get first right of refusal on a property,
which means that you get first dibs on it when it goes up for sale. If you
are renting that property, and the owner comes to you with first right of
refusal, he is essentially saying "either you pay up or you have to
relocate". This happens everyday (and worse things), but no one considers it
extortion....well because it isn't! Now if the owner of the property came to
you and said "hey, I want to put the house up for sale, I have a buddy who
is a mortgage broker, and my brother is a lawyer. We can probably work out a
deal that works best for you and me" who wouldn't do that? 

JS

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/