full-disclosure - More on Dan Geer

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.44.0309301012560.29893-100000@host49.duncable.cust.sover.net>
From: bruen at coldrain.net (Stormwalker)
Subject: More on Dan Geer

The following quotes clarify @Stake's position. It's worse than even I
thought. They know better, but don't care anymore. M$ is more important
than truth.

"Chris Wysopal, @stake's director of research, said the company had no
argument with the report's basic premise that technological diversity
poses less of a security risk than monolithic architectures. "But the way
the report is positioned and a lot of its conclusions are things we don't
agree with. The report is a bit one-sided," he said."

"An @stake official, who spoke on condition of anonymity, confirmed that 
Geer was fired and said that as a corporate officer he should have known 
that Microsoft was a client of the company. "It's not a matter of the 
content of the report; it's a matter of ethics and respect for clients," 
the official said."

Full story:
http://computerworld.com/securitytopics/security/story/0,10801,85441,00.html

ComputerWorld
@stake fired its CTO for co-authoring the document
Story by Dan Verton
SEPTEMBER 26, 2003