full-disclosure - M$ puts bounty out for Blaster and Sobigculprits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3FA9340C.60D72E77@acad.stedwards.edu>
From: chart at acad.stedwards.edu (Corey Hart)
Subject: M$ puts bounty out for Blaster and Sobigculprits

To write flawed code is one thing.  To write code to expose flawed code
is another thing.  To write code to take advantage of the flawed code and
to cause damage to machines all over the world is a crime and the person
who wrote that should be brought to justice.

My 2 cents.


Eric Bowser wrote:

> What about a bounty for the original engineer who wrote the flawed OS
> components?
>
> On Wed, 2003-11-05 at 10:02, Vic Vandal wrote:
> > M$ is offering $250K for info leading to the arrest of those
> > who released Blaster and/or Sobig.  See the details here:
> > http://news.com.com/2100-7355_3-5102110.html?tag=nefd_top
> >
> > One outcome of this will be severely limiting bragging about
> > pulling off such sploits.
> > And one would think those actually guilty should be real busy
> > right now erasing any/all evidence (that they didn't take care
> > of long ago).
> >
> > Maybe M$ should put out a bounty for reporting bugs in their
> > crappy software without going public instead.  That might be
> > more effective.
> >
> > Peace,
> > Vic
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.netsys.com/full-disclosure-charter.html
> --
> Eric J. Bowser
> 330.658.9858 direct
> 330.658.0123 fax
>
> i-TRAP Internet Security Services
> 888-658-TRAP toll-free
> 330.658.1040 local
> www.i-trap.net
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html