full-disclosure - no more public exploits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <79D80D394197764997DC956801CABCEE02B4B839@ushem204.exse01.exch.eds.com>
From: john.duquette at eds.com (Duquette, John)
Subject: no more public exploits

That is a terrible policy to follow.  If the vulnerability is real enough
for the vendor to publish a patch, then sysadmins should patch their
systems.  Haven't all the recent worms taught people anything?

However, Johnny I'm sorry to see that people who can't control themselves on
the Internet have forced you to stop publishing code.  Can't say I blame
you, but I don't have to like it.

> -----Original Message-----
> From: full-disclosure-admin@...ts.netsys.com 
> [mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Yabby
> Sent: Tuesday, April 27, 2004 1:06 PM
> To: johnny cyberpunk; full-disclosure@...ts.netsys.com
> Subject: Re: [Full-Disclosure] no more public exploits
> 
> 
> Even though I think that the publication of your code might 
> have been a couple of weeks too soon: too bad you chose to 
> abandon full disclosure. A lot of people do not have the 
> skills to transform theoretical vulnerabilities into 
> practical exploits. With the lack of proof that the 
> vulnerability can really be exploited, a lot of sysadmins 
> will decide not to patch, leaving the holes in tact for the 
> real blackhats, that have possession of the malicious code anyway....
> 
> maarten
> 
> > this is an anouncement that i personally have no more intention to 
> > publish any
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>