full-disclosure - Re: Nominate Dan Kaminsky for Most Overhyped Bug Pwnie Award

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 11 Jul 2008 16:49:44 -0400
From: Valdis.Kletnieks@...edu
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Nominate Dan Kaminsky for Most Overhyped Bug
	Pwnie Award

On Fri, 11 Jul 2008 13:22:31 PDT, Sandy Vagina said:

> > People should ignore this and post the exploit to Full-Disclosure
> > before Blackhat conference to fuck up the Blackhat profits and show
> > everyone how lame the exploit actually is.
> 
> Turned down your talk submission on "secret stuff I do with MI5", did they?
> 
> Given how much you can't stand it when anyone but you gets some
> attention for infosec stuff, Dan's patch must have triggered a full,
> rolling on the floor, kicking, crying and screaming until you can't
> breathe tantrum.

n3td3v is just mad he can't match the scope of Dan's announcement, and
who they had to get onboard for the coordinated release:

"I'm pretty proud of what we accomplished here. We got Windows. We got Cisco
IOS. We got Nominum. We got BIND 9, and when we couldn't get BIND 8, we got
Yahoo, the biggest BIND 8 deployment we knew of, to publicly commit to
abandoning it entirely."

http://www.circleid.com/posts/87920_an_astonishing_collaboration/

The rest is quite an informative read too....

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/