full-disclosure - Re: www.dia.mil

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 27 Oct 2008 21:33:19 +0400
From: "Razi Shaban" <razishaban@...il.com>
To: Valdis.Kletnieks@...edu
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: www.dia.mil

He's pointing out the wrong part. He's highlighted the link, which is
of no importance.

Yes, they're including a remote javascript. Then again, tens if not
hundreds of thousands of other websites include the very same script.
If statcounter's servers aren't very secure, they would have already
been compromised.

On the other hand, look at the voting machines the US gov't has
contracted. They have a tendency to screw up with technology, making
this one of their lesser problems (if you want to consider it a
problem at all).

Just my $.02.

--
Razi Shaban

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/