bugtraq - RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <58DB1B68E62B9F448DF1A276B0886DF192FDE0A5@EX2010.hammerofgod.com>
Date: Thu, 15 Sep 2011 20:59:23 +0000
From: "Thor \(Hammer of God\)" <thor@...merofgod.com>
To: "security@...ossecurity.com" <security@...ossecurity.com>,
  'Christian Sciberras' <uuf6429@...il.com>
CC: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>,
  "bugtraq@...urityfocus.com" <bugtraq@...urityfocus.com>
Subject: RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission

I'm curious.  Who is your contact at MSFT?  Who is it that has told you they have a "Binary Planting Clean-up Mission" and where do they mention you as having anything to do with it?

If you are going to claim MSFT's actions as substantive to your agenda, how about provide some details?

t  

> -----Original Message-----
> From: ACROS Security Lists [mailto:lists@...os.si]
> Sent: Thursday, September 15, 2011 1:41 PM
> To: 'Christian Sciberras'
> Cc: Thor (Hammer of God); full-disclosure@...ts.grok.org.uk;
> bugtraq@...urityfocus.com
> Subject: RE: [Full-disclosure] Microsoft's Binary Planting Clean-Up Mission
> 
> Hey Chris,
> 
> > I bet Microsoft actually like stating they just fixed yet another
> > severe bug.
> > Zero-day fixing is big business, you know....even if "zero"
> > is past a few "days".
> 
> I don't think Microsoft gains much from being able to say they fixed yet
> another bug
> - maybe if it were a bug they found internally and fixed proactively, but not
> like this. And I'm sure they'd rather be doing something else than fixing:
> fixing a product costs a lot, and it generates no revenue.
> 
> Cheers,
> Mitja