full-disclosure - Re: Deutsche Post Security Cup 2013

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 20 Mar 2013 13:59:29 +0000
From: Benji <me@...ji.com>
To: Full-Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Deutsche Post Security Cup 2013

>>I think its getting ridiculous, if you don't have a name in the industry
you're getting sued for the vast majority of bugs you solve...
>>And on the other hand, those same companies give away 3-15.000 for a
single bug if the researcher happens to be known :|

Examples please


On Wed, Mar 20, 2013 at 1:04 PM, Daniel Preussker <daniel@...ussker.net>wrote:

> On 20.03.2013, at 13:34, Hurgel Bumpf wrote:
>
> > Most of the subscribers are single individuals. Why bother sending them
> a invitaton when 99.9% are rejected because they dont have a "company" or a
> "big team". There a lot of valuable and competent individuals out there
> which are rejected because of their team size in the first place. Don't be
> so closed-minded, most freaks dont have friends and/or a cr3w.
> >
> > Thanks
> >
> > Bonan the bavarian
>
>
> This is a true word.
> I gave up CTF, Cups and similar because nobody cares for the small
> "hacker"...
> They always reject the New-Ones, ones that haven't had 20 0-days on his
> account or a shiny company name and is alone out in the wild.
>
> I think its getting ridiculous, if you don't have a name in the industry
> you're getting sued for the vast majority of bugs you solve...
> And on the other hand, those same companies give away 3-15.000 for a
> single bug if the researcher happens to be known :|
>
> Now I don't intent to start a shitstorm or a war here...
>
> Kind regards from the U-Bahn,
>
> Daniel Preussker
>
> [ Security Consultant, Network & Protocol Security and Cryptography
> [ LPI & Novell Certified Linux Engineer and Researcher
> [ +49 178 600 96 30
> [ Daniel@...ussker.Net
> [ http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x87E736968E490AA1
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/