full-disclosure - Re: [FD] FD should block attachments

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20040406134154.40a84b53@roadwarrior.bluesuperman.com>
From: michael.gale at bluesuperman.com (Michael Gale)
Subject: Re: [FD] FD should block attachments

Hello,

	I would have to look into the bandwidth amount on my Internet contract
but I might be able to host such a site via www.mydomain.com or any
www host entry that gets pointed to my web server. Right now I have a
PIII 667Mhz with 256 MB of RAM I could use (plus it hosts mail). 

If we could hammer out some details, guesstimated bandwidth usage and
what type of security concerns to people have. 

Michael.

On Mon, 05 Apr 2004 11:05:50 -0500
Paul Schmehl <pauls@...allas.edu> wrote:

> --On Monday, April 05, 2004 09:04:36 AM -0500 Bart.Lansing@...ls.com
> wrote:
> 
> >
> > Paul,
> >
> > Just a thought here...as you're right, having some modicum of
> > consideration for those who have cost issues with bandwidth (I'll
> > content that we are not spoiled, and that we...ok...most of us...pay
> > for the bandwidth we use...TANSTAFL).  However, you are assuming
> > that anyone who wishes to potentially send a file along here can
> > just as easily host one.  Not, I think, a valid assumption...and one
> > which, for many...would cost money.  So, who gets to pay?  Either
> > someone is paying to download, if they are on a  pay-as-you go
> > model, or someone is going to pay to host...either way, it's not
> > quite as simple as you've made it out to be.
> >
> You make an interesting point, and it has some validity.
> 
> What immediately came to my mind when I read that was the spammers. 
> They expect to shift the cost of what they do to the recipients.  Is
> that what should be the standard for security researchers as well?
> 
> Paul Schmehl (pauls@...allas.edu)
> Adjunct Information Security Officer
> The University of Texas at Dallas
> AVIEN Founding Member
> http://www.utdallas.edu
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html


-- 
Hand over the Slackware CD's and back AWAY from the computer, your geek
rights have been revoked !!!

Michael Gale
Slackware user :)
Bluesuperman.com