full-disclosure - Re: Python ssl handling could be better...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 4 Mar 2011 11:31:42 -0800
From: Tim <tim-security@...tinelchicken.org>
To: Michael Krymson <krymson@...il.com>
Cc: full-disclosure <Full-Disclosure@...ts.grok.org.uk>
Subject: Re: Python ssl handling could be better...

> I will, however, humorously point out that not seeing anything in black and
> white is...sort of black and white... :)

Yes, I have come to the conclusion over the years that some things in
security really are black and white, while other things definitely are
very grey.*  Being able to determine the difference is a key skill for
security professionals of any kind.

cheers,
tim

* To put it another way, the function which describes security return on
  investment, as one grows investment from 0 to infinity is sometimes
  continuous and sometimes discontinuous (stair-stepped), or a mix
  thereof, depending on the situation.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/