full-disclosure - Reacting to a server compromise

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: crypto at clouddancer.com (Aron Nimzovitch)
Subject: Reacting to a server compromise

No good deed goes unpunished.

Been there, tried that, nearly got hit with a lawsuit (IMMEDIATE
threat from the suit involved).  If the suits running the place had
half a brain between them, your "info" would be unnecessary.

If you cannot prove 'beyond a reasonable doubt' that you did not
conduct the attacks yourself and then post this BS as a coverup, you
will be overrun, no matter how "white" you might be.  Better have deep
pockets to proceed, or get the noobs here telling you to "tell all" to
pony up to your defense fund.  Ask Randall Schwartz about it sometime.

Welcome to the real America!