full-disclosure - Re: INSECT Pro 2.5 Release

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 30 Mar 2011 11:47:10 -0400
From: Steven Pinkham <steve.pinkham@...il.com>
To: runlvl <runlvl@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: INSECT Pro 2.5 Release - Web scanner tool

runlvl wrote:
 > The INSECT Pro version hosted on that site is really old, from what I
 > see is the version 1.1 and is not an official version, on the other
 > side.

The version made available is older (2.0 version, not 1.1 as you claim), 
but it is an official version, or at least what you gave me as an 
official download.  There is also a recompressed version with the same 
content for a smaller download size for people that want that.
As I said before, I'll happily update the version hosted there to the 
newest version if you allow it.  My download password stopped working at 
the time of the next release, and emails about it have been ignored.

 > INSECT Pro 2.5 is free and we only ask for a donation to show
 > interest. The amount of the donation is not fixed.

Please, let's not start this up again.  Your page clearly says you are 
buying a license, and has removed all comments about it being free.  The 
licenses of the software you include (Metasploit and Skipfish) allow 
this, and there's no benefit to you making the claim of the software 
being free.  You may or may not offer some licenses gratis, but that's 
different from the software being free in the sense that most people 
understand.  If it's free, I'll happily host newer versions for free 
download for everyone.  Otherwise, stick with the license language you 
have on your website.

To be clear, I have no problem with you offering licenses for sale, 
offering licenses for donations, or making software freely available. 
Just do the one you are claiming to do please.
-- 
  | Steven Pinkham, Security Consultant    |
  | http://www.mavensecurity.com           |
  | GPG public key ID CD31CAFB             |

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/