full-disclosure - re: openssh exploit code?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031020145816.GR17073@sparky.finchhaven.net>
From: jsage at finchhaven.com (John Sage)
Subject: re: openssh exploit code?

On Mon, Oct 20, 2003 at 03:17:42AM -0400, S . f . Stover wrote:
> On 20 Oct 03 03:28:02AM mitch_hurrison@...lip.com[mitch_hurrison@...lip.com] wrote:

/* snip */

> BTW, I thought "whitehat" implied
> non-disclosure, which isn't really the direction I'm coming from.

/* snip */

Nothing of the sort.

In fact, whitehats and blackhats often perform exactly the same tasks
at the keyboard while doing research, and use the same tools.

It's just the ulitmate purpose to which the research is put that
differs...

- John
-- 
"Most people don't type their own logfiles;  but, what do I care?"
-
John Sage: InfoSec Groupie
-
ABCD, EFGH, IJKL, EmEnOh, Pplus+, Mminus-
-
ATTENTION: this entire message is privileged communication, intended
for the sole use of its recipients only. If you read it even though
you know you aren't supposed to, you're a poopy-head.