full-disclosure - Re: The info-sec circle of life...

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1037727579.2425.75.camel@gnu>
From: joao at silvaneves.org (João Miguel Neves)
Subject: Re: The info-sec circle of life...

On Tue, 2002-11-19 at 17:03, Gregory Kornblum wrote:
> > Blackhat now pimps his skillz/collection of tarballs to the 
> > highest bidder for corporate jobs of "espionage" against 
> > their competitors....and as the holes are unknown, there is 
> > no way to protect against those holes by the internet at large.
> > 
> > Its like turning a kid loose in a candy store, and the 
> > storekeeper is blind, and deaf.
> > 
> > And don't tell me that blackhats have any scruples that would 
> > compell them to not do this....utter bullshit.
> 
> Yes I am not saying that this creates a perfect world. Just a better one. I
> would rather have 5 malicious geniuses than 50 malicious dumb kids any day.
> Right now we have both.
> 
Strange, my experience is that without full-disclosure you have 5
malicious geniuses and 50 malicious dumb kids and 50% of users with a
program that gives them extra privileges on the machines they work. But
hey, I was only the sysadmin back then, so I may be wrong.

-- 
						Jo?o Miguel Neves
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20021119/a989d6a2/attachment.bin