full-disclosure - Re: Linus summarizes state of the "security industry" with precision and accuracy.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 18 Aug 2008 17:14:41 -0500
From: "John C. A. Bambenek, GCIH, CISSP" <bambenek.infosec@...il.com>
Cc: "Full Disclosure" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Linus summarizes state of the "security
	industry" with precision and accuracy.

Who's Linus?

On Mon, Aug 18, 2008 at 3:50 PM, Simon Valiquette <v.simon@...e.org> wrote:

> coderman un jour écrivit:
> > ... hypothesis that "security researchers" are all masturbating monkey
> > whores is now proven definitively. [0]
> >
> > """
> > Too often, so-called "security" is split into two camps: one that
> > believes in nondisclosure of problems by hiding knowledge until a bug
> > is fixed, and one that "revels in exposing vendor security holes
> > because they see that as just another proof that the vendors are
> > corrupt and crap, which admittedly mostly are," Torvalds states.
> >
> > Torvalds went on to say he views both camps as "crazy."
> >
> > "Both camps are whoring themselves out for their own reasons, and both
> > camps point fingers at each other as a way to cement their own reason
> > for existence," Torvalds asserts.
> > """
> >
> > 0. Torvalds Interview with Network World , 08/14/2008
> >
> http://www.networkworld.com/news/2008/081408-torvalds-security-circus.html
> >
>
>    Isn't that quite old news?  Not only the article doesn't offer anything
> new, but It also doesn't give the full picture and offer very little
> useful information compared to the real discussion.
>
>   I did read the thread at this time, and there was many interesting
> ideas.  If I happens to see an article that resume well the issues
> involved, I'll post a link, but I won't spend much time searching, so
> don't wait after me.
>
>
>   By the way, Linus Torvalds is very well known to enjoy starting flames
> on purpose (he calls that "flamefesting").  This time, the troll was trown
> at OpenBSD, but It was too big to be taken seriously by them, so It is
> mostly the security people that reacted.
>
>   I prefer the troll he launched last year when he basically said that
> Gnome is just a waste of time and than both users and developers should
> just give-up and move on to KDE, which would be a much better and
> productive use of their time.  It was said in 2007 directly on some major
> Gnome mailing list, like his previous flames against Gnome. :o)
>
>
> Simon Valiquette
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/