full-disclosure - Microsoft Cries Wolf ( again )

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <000001c34953$44e5cd10$0100000a@sanctuary>
From: aldr1c at nildram.co.uk (Scott)
Subject: Microsoft Cries Wolf ( again )

Good Point, well presented.

;-)


Doc


-----Original Message-----
From: Ron DuFresne [mailto:dufresne@...ternet.com] 
Sent: Sunday, July 13, 2003 4:20 PM
To: Scott
Cc: full-disclosure@...ts.netsys.com
Subject: RE: [Full-Disclosure] Microsoft Cries Wolf ( again )

On Sun, 13 Jul 2003, Scott wrote:

> All,
>
> 	Maybe I am just a bit paranoid, but how many people would trust a
> vendor to harden a box prior to shipping?  I for one always reinstall from
> clean/trusted media when a new/used box comes through the door.
>
> 	If the hardened box from a vendor (kudos to Dell for trying this
> anyway) and it gets cracked, is there a cause for blame or legal action
> against the vendor for false advertising, repair costs etc?  Would
something
> like this be possible?
>
> 	I would be interested in knowing what riders or caveats vendors
> would ship with the hardened product.
>
> It all comes down to trust in the end, however there are few people in
this
> life that I trust that much (sad isn't it!).


Before one can validate the the depth of the commitment, one must first
get a commitment.


Thanks,

Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
	***testing, only testing, and damn good at it too!***

OK, so you're a Ph.D.  Just don't touch anything.