full-disclosure - List Charter

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3D32935F.5BE0E58A@lupa.de>
From: bolo at lupa.de (Boris Lorenz)
Subject: List Charter

Yup,

Alan Rouse wrote:
> 
> My interest is in the earliest possible warning of what the bad guys are
> currently trying to do to systems like mine. I don't care who it comes
> from, or whether it is presented in a businesslike manner, as long as it
> contains useful information.  I'm interested in proof of concept code,
> actual exploit code, artifacts from actual attacks, theoretical
> vulnerabilities discovered by code reviews, defensive tactics, links to
> ongoing discussions, educational q & a, or anything else that might make
> me aware of potential mayhem and how to prepare for it.
> 
> I'm not interested in flame wars or philosophical arguments. They don't
> help me do my job.

Spot on, Alan. bugtraq bashing and chit-chat about The Right Thing to do
can be refreshing at times, but that's not what my customers want whose
networks I have to protect. And that's not what I rate as useful
information.

I think we will have to wait another week or so till the dust has
settled a bit, and the new list shows in which direction it will go; if
the current flood of futile discussions keeps its tide, I will prolly
sign off.

Boris Lorenz <bolo@...a.de>
* Security Admin *nix - *nux *
---