full-disclosure - THCIISSLame exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: etomcat at freemail.hu (Feher Tamas)
Subject: THCIISSLame exploit

Hello,

>THC is a hacker group, not a cracker group.

Publishing root exploit source code is free speech and is protected.

Publishing the binary is VX-ing and is criminal. That is very clear.

BTW, AV software only alert on binaries. AV firm research labs refuse to 
investigate malware in source code format, even if you send them a 
sample of a brand new one.

To share knowledge with security researchers does not require 
releasing binary executables, professional testers can compile the 
source code for themselves. Avoid releasing binaries and you will not 
have problems with the authorities.

Regards, Tamas Feher.