full-disclosure - CERT, Full Disclosure, and Security By Obscurity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <200301310221.NAA28822@caligula.anu.edu.au>
From: avalon at coombs.anu.edu.au (Darren Reed)
Subject: CERT, Full Disclosure, and Security By Obscurity

In some mail from Grant Bayley, sie said:
> Access Denied
> ------------------------------------------------------------------------
> This information is only accessible to authorised AusCERT members.
> If you wish to access this document.	Please Login.
> 
> It's just lucky the information was already out there.
> 
> We have our own self-appointed ivory tower here in Australia.
> 
> It is called AusCERT.
> _______________________________________________

Whatever you might think, AusCERT is like this because they get
bugger all funding from the Government and so need to be able
to provide their "members" with some sort of exclusive services
that they can collect money for in order to pay for staff and
facilities.

Even when it was Government funded, they had bugger all in the
way of (hardware) resources because it arose inside a Uni

I suppose my advice here is do not think of AusCERT or treat
them like an organisation that provides free service(s).

Darren