full-disclosure - Talk in #grsecurity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: dave at immunitysec.com (Dave Aitel)
Subject: Talk in #grsecurity

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joshua Brindle wrote:

|
| So I ask grsecurity fans, why would you run the software of someone
|  no better than the people trying to crack your machine? This is
| not responsible behaviour and shows a clear disregard for security
| and safety of others.
|

Whatever. It shows a clear disregard for people using half-solutions
which don't work. This is normal behavior. The fact is that grsecurity
is a hundred times better then the alternatives - and anyone using the
alternatives has made some sort of comprimise that leaves them open to
attack, and probably already knows it.

- -dave

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAZJ8vzOrqAtg8JS8RAsABAJ9qjky3R90wRGrNIF1iZxqiDJ/L4ACdGIvO
xOLzWTRu6Yv3qxspq9csKL8=
=rBXh
-----END PGP SIGNATURE-----