full-disclosure - Learn from history?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <E075A187B11EED409B12D00100CAAD663B53@ntserver.meltemi.local>
From: Jos at meltemi.co.uk (Jos Osborne)
Subject: Learn from history?

Michal Zalewski wrote:

> If we must toy with bogus marketspeak "equations", shouldn't E - at the
> very least - numerically correspond to the consequences (loss?) caused by
> an event, rather than being an event itself?
>
> Otherwise, my risk R of getting a bar of chocolate from a stranger is
> 0.001 * getting_chocolate_bar_from_stranger.
>

Or ten times that if you're prepared to give them your administrator password...