full-disclosure - it's all about timing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <200207312310.g6VNAhP30301@lart.sdsc.edu>
From: tep at SDSC.EDU (Tom Perrine)
Subject: it's all about timing

>>>>> On Wed, 31 Jul 2002 17:53:08 -0500, "Moyer, Shawn" <SMoyer@...re.com> said:

    MS> ISC? [ ^_^ ] Sure, it shouldn't have leaked, but exactly how long *were*
    MS> they going to let every OSF/1 box out there be a sitting duck? At least now
    MS> I know to chmod 750 /bin/su and chown it root:wheel (a good practice
    MS> anyway). 

Hmmmm, looks like a suit against the vendor for "reckless endagerment"
:-) might be in order.  Sometimes I wish I was an ambulance-chasing
lawyer (as opposed to the good kind).

(Yes, I know that "endangerment" requires possibility of harm to a
person.  But I can wish, and there must be some liability here...)

--tep