full-disclosure - Re: it's all about timing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <86bs8n84y4.fsf@megacz.com>
From: adam at xwt.org (Adam Megacz)
Subject: Re: it's all about timing

Florin Andrei <florin@....com> writes:
> V is right, because not being warned in advance, their customers are
> left to the mercy of script kiddies.

The resasonable conclusion here is that V should be suing the script
kiddies, not H.

> If H is going to publish the exploit without early warning, i'll say
> V has all the rights in the world to sue the crap out of H, and put
> him(her) in jail for one thousand years, and i'll applaud that.

Outlawing the distribution of knowledge is a slippery slope.  I don't
want to go back to the bad old days when "terorrists might use it to
coordinate attacks" was a valid excuse for not letting me use/export
pgp and ssh.

Premature disclosure is bad in the same way that cheating on one's
spouse is bad -- it's undoubtedly a horrible, evil thing to do, but
it's not something that the government should be in the business of
locking people up for.

  - a

-- 
Sick of HTML user interfaces?
www.xwt.org