full-disclosure - FW: HP Full Disclosure Story (fwd)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <NMRC.666.6.66.0208231031400.12501-200000@www.nmrc.org>
From: hellnbak at nmrc.org (hellNbak)
Subject: FW: HP Full Disclosure Story (fwd)

Note to HP - Please take the resume I (Steve Manzuik) was asked to submit
to your Canadian consulting practice a few months ago and shove it directly
up Dan Grove's and the rest of your so called security teams collective
asses with no lube.  I would rather flip burgers than lower myself to even
considering working for an organization such as yours.

Furthermore, I have forwarded the attached email to *ALL* of my clients
which include fortune 100 and fortune 500 organizations in the United
States and Canada.  Your use of September 11th to try and scare a
legitimate researcher, who has in the past proven to be very responsible,
is pathetic and a shoddy attempt at trying to force Tamer Sahin into not
releasing his findings and therefore saving HP the time, effort, and money
to fix something they should have done right in the first place.

You suck.

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

"I don't intend to offend, I offend with my intent"

hellNbak@...c.org
http://www.nmrc.org/~hellnbak

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

---------- Forwarded message ----------
Date: Fri, 23 Aug 2002 08:41:06 -0700
From: Steve <steve@...renchtech.com>
To: steve@...renchtech.com
Subject: FW: [Full-Disclosure] HP Full Disclosure Story

Read the attached text. It is scary how HP is using Sept. 11 and several
of the reactionary Sept 11 fear laws to threaten a security researcher
who, 1.)  Doesn't even reside in the USA, and 2.) Has a history of being
responsible with handling his vulnerabilities.  Makes me wonder if HP
isn?t going to try and sue Tamer or have him charged under the US DMCA
like they did to Snosoft.

> Hello Folks,
> ?
> In January, have found a security hole in HP AdvanceStack
> switches. This
> vulnerability affected 8 different swicth models. There had been an
> interesting mail traffic between HP Security Response Team
> and me. I compiled
> it from my mail archive lastly and I thought that it would take your
> attention.
> ?
> Best Regards;
> ?
> Tamer Sahin
> http://www.securityoffice.net
>
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: hp.txt
Url: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20020823/319bc3c6/hp.txt