full-disclosure - Security Industry Under Scrutiny #4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1280435cc3ada67fa0deee22a8a0991e@remailer.cryptofortress.com>
From: nobody at cryptofortress.com (Anonymous)
Subject: Security Industry Under Scrutiny #4

> How long are we going to hold back from making these security companies
> responsible for providing the same potency of information as Paladin Press did?
> Any major internet security site will give you links to places where you can
> download hacking utilities.  Utilities that will be used by people with the same
> degree of malicious intent as Perry and Horn.
>
> The media encourages hacking.  Hollywood says its trendy.  Anyone with a
> computer has thought about it at least once, and many have sought to take the
> next step, despite how little they know.  And what does the security industry
> do?  It helps them down that cliff.  People on the internet aren't just told how
> to commit cybercrime, they are encouraged to be malicious enough to do so.
>
> Please, somebody make these security fucktards responsible for the information
> they pump out!  It's one of the best ways to stop cybercrime.  If we stop
> rewarding wannabe hackers with fame & power security WILL improve.  To do
> otherwise is to give people like Perry and Horn cash rewards for killing more
> wives and quadriplegic sons and innocent nurses.

Sure, lets crack down on the evil, baby killing security companies.

Good idea.

Now that we've tamed the problem of millions of wannabes being armed with
dangerous information that can cause mayhem, or, using the example you
cite of James Perry, create amateur killers, what should we do about the
blackhats?

They're already skilled at developing their own tools for "killing", and
they already "kill" for various reasons, whether it be personal gain,
organisational gain (ie a hacking group), or conceivably for the gain of
a foreign, enemy power.  To continue your comparison between wannabe
hackers and amateur killers, the blackhats, therefore, are the
professional hitmen.  The real contract killers.  The Jackal, perhaps.

Which do you think an open, democratic society would see as the greater
threat?

The threat of a vast number of people capable of "falling off the
cliff" and killing other random citizens that don't have protection
details etc.

Or the threat of a select few that understand defensive tactics, walking
formations, successive layers of security, what security surveys are
likely to find, and are capable of assassinating the head of state?

You'll find your answer to this question in the degree to which
organisations such as the FBI take threats against the President so
seriously.  They know they can protect against most random nutballs with
an ounce of information and proper preparedness.  They don't know they can
protect against an individuals with skill, determination and the proper
equipment.

Please - go back to hacking.  Your attempts to distract attention from the
blackhat community through philosophy and misdirection are for entertainment
purposes only.

I <3 U 2