full-disclosure - scriptkids on this list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200209270341.g8R3fll96829@mailserver4.hushmail.com>
From: gobbles at hushmail.com (gobbles@...hmail.com)
Subject: scriptkids on this list

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Nuno Fernandes writes:

> LOL, shut up you script kiddies...

and

> Morons like yourself give gobbles a good name.

There seems to be a persistent pattern on this list that results in
the real scriptkids such as Steve "HellnBak" Manzuik, Charles "Core"
Stevenson, Ron DuFresne, and Nuno Fernandes calling people -- people
who are obviously magnitudes above them in skill level -- "script
kids". It's obvious that the aforementioned people are scriptkids
because, being some of the most vocal whitehats on this list,
you'd expect to see some contributions in the form of code or tools
housed on their websites or attributed to their names. But when you
see their blank websites (Manzuik), their fundamental grasp of
a computer architecture that nobody really cares about (Stevenson),
their posts concerning firewalls and Internet "attack vectors"
(DuFresne), and their half-assed security blog servers containing
nothing of value except vulnerabilities that a 4 year old could
exploit (Fernandes), the old "pot calling the kettle black" scenario
immediately springs to mind.

In fact, it's not just on this list, it's everywhere. We're sick and
tired of seeing the "scriptkid" label planted on anyone who's actually
out there doing real hacking. It seems to be the primary form of
character assassination and denigration used by the security industry
to defend their pride -- pride which is obviously at gunpoint when
you have these talented individuals making a point of their dumb asses.

We suggest careful study of the following textfiles:

http://phrack.efnet.ru/texts/hack1.txt
http://phrack.efnet.ru/texts/hack2.txt
http://phrack.efnet.ru/texts/hack3.txt

Long live ~el8 and PHC.

-----BEGIN PGP SIGNATURE-----
Version: Hush 2.2 (Java)
Note: This signature can be verified at https://www.hushtools.com/verify

wlwEARECABwFAj2T1VcVHGdvYmJsZXNAaHVzaG1haWwuY29tAAoJEBzRp5chmbAPoqcA
njWZ7ENGb3vzq85hhYWQ2n6LLL3CAJ9Irf9SYANuqTAXC80oyUu59xPa8A==
=zifk
-----END PGP SIGNATURE-----