lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Message-ID: <200402210239.i1L2dG8B008572@mailserver3.hushmail.com>
Date: Fri, 20 Feb 2004 18:39:16 -0800
From: <eval@...hmail.com>
To: bugtraq@...urityfocus.com
Cc: full-disclosure@...ts.netsys.com
Subject: RE:  Re: is predicatable file location a vuln? (was RE: Aol Instant Messenger/Microsoft Internet Explorer remote code execution)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> From: http-equiv@...ite.com [mailto:1@...ware.com]
> Sent: Friday, February 20, 2004 1:37 PM
>
> This is going to hit them square in the nuts
> if not now, then in the very near future.
> And I'll make sure it is zero-day'd.

Way to go, you seem to be working very hard on making sure that our government
will regulate security research.

There are two kinds of security researchers, those that try to secure
people and those that try to exploit people - you are doing a great job
convincing Congress that we all belong in the last category.

> All these will culminate in yet another STENCH ! exploit sooner or
later.

Why don't you release your exploits on packetstormsecurity or astalavista
instead of Bugtraq? You obviously have no interest in trying to secure
anyone, instead you are deliberately hurting the security of us all.

How are you any different than a virus writer? They are creating malware
and releasing it on their sites, then they claim innocence because they
didn't click the "Send" button. Both of you are intentionally trying
to help blackhats, script kiddies and criminals.

Gigabyte just got arrested for doing this (http://www.techtv.com/news/securityalert/story/0,
24195,3621765,00.html), the only difference I can see is that you are
foolish enough to announce it in advance.


EVAL
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.3

wkYEARECAAYFAkA2xbkACgkQlMG0xHUxDsRMxwCfXVNwXqCHPbJ2jFrTjXxvc+YW9zQA
n1DRc7WgTBGOykLt2AuIhHmOTHb5
=o8x3
-----END PGP SIGNATURE-----




Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ