bugtraq - Re: Vulnerabilites in new laws on computer hacking

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 22 Feb 2006 10:12:16 +0100
From: Casper.Dik@....COM
To: Bigby Findrake <bigby@...emeron.org>
Cc: Anthony Cicalla <Anthony.Cicalla@...kServ.com>,
	bugtraq@...urityfocus.com
Subject: Re: Vulnerabilites in new laws on computer hacking



>Perhaps this is beating a dead horse, but could someone explain to me why 
>the addition of a $50 computer found at a garage sale, a $10 NIC, and a 
>$20 switch or hub to any would-be-infosec's arsenal wouldn't suffice for 
>this purpose?  We're not trying to brute force 4 kilobit pgpkeys, we're 
>trying to present a host to attack.  FreeBSD, NetBSD, OpenBSD, Linux... 
>all free operating systems.  Isn't there an x86 version of solaris that's 
>free?  $500 computers aren't needed for this testing.  I suggest that the 
>necessity for more expensive hardware is the exception, and not the rule. 
>Bochs may not be speedy, but it works.

Shameless plug: All versions of Solaris 10 are free now, both SPARC and x86.

>I would also suggest that anyone who finds that money is an obstacle is 
>looking for excuses.  I have often found ways to make outdated hardware 
>useful in a variety of situations.

Including hardware left on the curbside.

And bear in mind that while people may still be hiring hackers,
being employed as a security guard with any type of criminal record
is next to impossible as it should be.

It is only a matter of time before the computer industry follows
suit.

Casper