lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <5.2.0.9.2.20021207194656.043f3eb8@mail-dnh.mv.net>
From: brian at pc-radio.com (Brian McWilliams)
Subject: UN support for "security by obscurity"

Note that the policy of "security by obscurity" in WMD info has been 
ratified by the UN via accords including the Chemical Weapons Convention, 
the Biological Weapons Convention and the Nuclear Non-Proliferation Treaty.

http://www.nytimes.com/2002/12/07/international/middleeast/07NATI.html

I don't believe the IT industry has yet reached equivalent accords on the 
handling of vulnerability info.

Brian

At 07:21 PM 12/6/2002, Richard M. Smith wrote:
>Another data point in the full-disclosure/security-by-obscurity debate:
>
>http://www.cnn.com/2002/WORLD/meast/12/06/sproject.irq.un.report/index.h
>tml
>
>UNITED NATIONS (CNN) -- After Iraq hands over its declaration on weapons
>of mass destruction programs Saturday, U.N. weapons inspectors will
>analyze and edit out parts of it before distributing it to members of
>the U.N. Security Council.
>
>Hans Blix, chief U.N. weapons inspector, said Friday the 15-member
>council agreed to the procedure after discussing "the risks of releasing
>parts of this declaration that might help to achieve proliferation of
>nuclear, biological, or chemical weapons."
>
>The United States, Russia, and other countries are concerned about
>releasing information that would provide "a training manual for how to
>build weapons of mass destruction," a Western diplomatic source told
>CNN.
>
>...
>
>Richard
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ