bugtraq - Re: How hackers cause damage... was Vulnerabilites in new laws on computer hacking

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <43FE3B9C.8070905@science.org>
Date: Fri, 24 Feb 2006 11:47:56 +1300
From: Jason Coombs <jasonc@...ence.org>
To: Craig Wright <cwright@...syd.com.au>
Cc: bugtraq@...urityfocus.com,
	Full-Disclosure <full-disclosure@...ts.grok.org.uk>,
	fla.linux@...il.com, security-basics@...urityfocus.com
Subject: Re: How hackers cause damage... was
 Vulnerabilites in new laws on computer hacking

Craig Wright wrote:
> The "state of doubt" I was referring to is the condition of
> determination associated with knowledge that a system has been attacked.
> The determination that the attacker was benign or malevolent leaves one
> in doubt

Your sage wisdom on the subject of helping people respond appropriately 
to attacks, crime and fraud (insider/outsider/etc) is duly acknowledged.

We all have 'knowledge' that our systems have been attacked based on the 
fact that software originating from Microsoft is present on our boxes, 
and the fact that microprocessors designed only for stand-alone use 
(absent data communications or other untrustworthy I/O) have been 
improperly and irresponsibly thrust onto the marketplace by Intel, AMD, 
et al -- companies with the technical awareness of the proper solution 
to the problem who withhold not only the solution but also withhold 
disclosure of their knowledge of the problem.

Sincerely,

Jason Coombs
jasonc@...ence.org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/