full-disclosure - FW: FEEDBACK: Testing Microsoft and the DMCA

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <A69A7B877487474BB3D5966F178ED2950100A5@econweb2.bus.usu.edu>
From: webmaster at econ.usu.edu (Irwan Budiman)
Subject: FW: FEEDBACK: Testing Microsoft and the DMCA

Does this means that this book (http://www.amazon.com/exec/obidos/tg/detail/-/0735615721/qid=1050724552/sr=1-7/ref=sr_1_7/103-5102984-6806223?v=glance&s=books) will never be published then? I wonder if there were a lot of pre-order for this book, then the MS-Press will change their mind.

BTW, talking about other publishers, you may try New Riders because they publish a couple security books, or probably Syngress may also be a good idea because Syngress has a lot of "Hack Proofing" series (from Windows 2000 Server, Network, XML, Cold Fusion, etc.). You may change the title from IIS Security Technical Reference to Hack Proofing IIS Server.

Thanks

-----Original Message-----
From: Jason Coombs [mailto:jasonc@...ence.org]
Sent: Friday, April 18, 2003 9:02 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] FW: FEEDBACK: Testing Microsoft and the DMCA

-----Original Message-----
From: Jason Coombs [mailto:jasonc@...ence.org]
Sent: Friday, April 18, 2003 4:58 PM
To: david.becker@...t.com
Subject: FEEDBACK: Testing Microsoft and the DMCA

I'm an author and computer forensics/infosec expert who recently authored a
book about information security and Microsoft Internet Information Services
(IIS) that Microsoft Press was planning to publish... They opted not to
publish my book after they got a chance to read it; perhaps fearing that
acknowledging flaws and pointing out weaknesses in their own products would
undermine their position with respect to prosecuting DMCA violators.

After reading your article concerning "Hacking the XBox" I thought you might
be interested in my story as well. My literary agent pitched my book to Wiley
and it was rejected rather abruptly and with no discussion (odd, considering
that I've been published by both Wiley and Hungry Minds/IDG Books in the
past).

My plan, if I can't find a publisher willing to take the 'risk' of exposing
details of vulnerabilities in IIS, is to give away my book as an open source
manuscript/electronic book in order to educate people who use Windows Server
operating systems and IIS on critical security countermeasures. There's no
reason for Microsoft customers to be kept in the dark about necessary security
precautions simply because publishing the forensic details threatens to result
in prosecution of those responsible, or in the case of Microsoft Press,
threatens to take Microsoft's DMCA teeth out of their big fat head.

Sincerely,

Jason Coombs
jasonc@...ence.org