full-disclosure - Microsoft Cries Wolf ( again )

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Law11-OE42OQ69EYyLN0000917e@hotmail.com>
From: se_cur_ity at hotmail.com (morning_wood)
Subject: Microsoft Cries Wolf ( again )

> If you're going to take the interpretation of full
>disclosure literally, notification of the vendor and the public is
>simultaneous.

 this was my point, they are complaining about simultaneous
disclosure.
regardless if the exploit is feasable was not my concern, but the
reaction to "Full Disclosure"
they are on the OIS team??? ...  but uhh  "The software maker wasn't
pleased with the premature revelation of the vulnerability before its
security teams got a chance to look into the matter"

... i say again, too bad billy

morning_wood