bugtraq - Re: To anybody who's offended by my disclosure policy

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <41A83976.4040904@linuxbox.org>
Date: Sat, 27 Nov 2004 10:23:18 +0200
From: Gadi Evron <ge@...uxbox.org>
To: JxT <jxt.lists@...il.com>
Cc: kf_lists <kf_lists@...netops.com>,
   Berend-Jan Wever <skylined@...p.tudelft.nl>,
   full-disclosure@...ts.netsys.com, vuln-dev@...urityfocus.com,
   bugtraq@...urityfocus.com
Subject: Re: To anybody who's offended by my disclosure
 policy

JxT wrote:
> Oddly enough this is a full disclosure list, your entitled to your
> opinion and I'm entitled to mine.  Skylined released something, if he
> didn't do it, someone else would have come along.  Since he did
> release it, it's out in the open and the claims that this is no big
> issue are of course proven wrong.  You can sit in your comfy herman
> miller chair and make assumptions about young talented fellas who have
> no direction and think the world owe them something. At the end of the
> day what it comes down to is a talented guy released information that
> helped educate people.  Sure that information can be used for negative
> purposes, thats life, deal with it.  After all isn't that why your in
> YOUR profession as you quoted in earlier emails is all about.  Perhaps
> Skylined released something that may actually make you do some work...
>  ?

No. Work is too hard. Let me drink some tea and stay in bed. Please.

> And yeah yeah yeah, virus this, virus that!  That's why security
> professional get paychecks.

Yeah. Let's create some viruses on our own so that we can get paid more?

> Welcome to the playground..  Quack Quack.. 

Playground?

Question is, do you want to be one of the kids playing and ruining 
lives, or do you want to be one of the people who report problems and do 
something about them - plus get attention, respect and all the rest?

The guy has talent? Fine by me. I wish him all the luck.

This is not about full disclosure. I can live with Full Disclosure. I 
can't like with kids who think they own the world and want to pwn the world.

	Gadi.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html