full-disclosure - MyDoom.b samples taken down

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <401C7729.1090509@kataan.org>
From: kweiske at kataan.org (Kurt Weiske)
Subject: MyDoom.b samples taken down

Nick FitzGerald wrote:

> I know most of you will not believe this because you so stupid you 
> already believe that live virus samples are _just_ information and 
> therefore _should_ be subject to "full disclosure" (this is a special 
> form of ignorance that very little empirical evidence seems able to 
> budge 

Before I make a judgement here, are you against publishing the virus in 
executable form that could be accidentally launched, or against 
publishing the virus in any form?

If the latter, then perhaps you might find other mailing lists with a 
more sympathetic audience. If the former, after consideration, I agree. 
Handling a live virus is akin to handling their real-world counterparts, 
and having some protection against accidentally launching it on a 
production system is a Good Thing. I've renamed mine to a non-executable 
  extension, and they're off my production boxes.