bugtraq - Re: Your Opinion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <45FAFE0D.7060801@rowe-clan.net>
Date: Fri, 16 Mar 2007 15:29:01 -0500
From: "William A. Rowe, Jr." <wrowe@...e-clan.net>
To: Mark Litchfield <Mark@...software.com>
Cc: bugtraq@...urityfocus.com, vulnwatch@...nwatch.org,
	full-disclosure@...ts.netsys.com
Subject: Re: Your Opinion

Mark Litchfield wrote:
> I have heard the comment "It's a huge conflict of interest" for one
> company to provide both an operating platform and a security platform"
> made by John Thompson (CEO Symantec) many times from many different
> people.

The only conflict that occurs to me is the commercial pressure of an
OS vendor to retain their reputation of security, by providing less
disclosure than a security coordination group or security utility
company might present.  When RoI reigns supreme, the pressure to
downplay security issues, correct them silently, etc is much greater
than the desire to be candid with the end-user administrator community.