full-disclosure - Re: Project Chroma: A color code for the state ofcyber security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon, 1 Dec 2008 23:30:23 +0200
From: "James Matthews" <nytrokiss@...il.com>
To: n3td3v <xploitable@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Project Chroma: A color code for the state
	ofcyber security

The color system was made in order to give people a quick look at the terror
scale. So to this can be something for us to have a quick look at the
exploit scale. Remember these colors are for people in the IT industry and
not for the average person.
James

On Mon, Dec 1, 2008 at 10:52 PM, n3td3v <xploitable@...il.com> wrote:

> Maybe he thinks the same as you and is making fun of the Department of
> Homeland Security, SANS Internet Storm Center etc.
>
> On Mon, Dec 1, 2008 at 4:27 PM, rholgstad <rholgstad@...il.com> wrote:
> > and how does making a color based on these inputs protect people?
> >
> > Mike C wrote:
> >> On Mon, Dec 1, 2008 at 4:21 AM, vulcanius <vulcanius@...il.com> wrote:
> >>
> >>> By the way, I also noticed that the new site for your project has the
> >>> current threat level as yellow. Is it safe to assume that you've
> already got
> >>> your metric systems in place and running?
> >>>
> >>>
> >>
> >> Yes,
> >>
> >> We do have a working framework for color code generation. The inputs
> >> to this function include
> >>
> >> *exploits released in the past week
> >>   - The severity of the exploit
> >>   - The application it was in
> >>   - The language
> >>   - estimated users of the software
> >>
> >> *The previous week's color
> >>
> >> *Localized nature of exploits.
> >>
> >> We cannot comment more on this until it is refined and standardized.
> >> If you are (or know) an antivirus vendor, please contact me offline to
> >> move ahead.
> >>
> >>
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
http://www.astorandblack.com/

http://www.jewelerslounge.com/movado-watches-on-sale

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/