full-disclosure - Sasser author

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040513161826.72801.qmail@web41606.mail.yahoo.com>
From: keydet89 at yahoo.com (Harlan Carvey)
Subject: Sasser author

Serge,

I agree with you, as well...but I think at some point,
we (and by "we", I mean the CxOs responsible to the
Boards of companies for the operation and function of
those entities...) really need to start heading "best
practices".  The Principle of Least Privilege wasn't
something that just spang into existance yesterday.

You're right...according to our laws, it is a crime. 
But that doesn't mean that we have to be victims...

--- "Serge van Ginderachter (svgn)" <svgn@...id.be>
wrote:
> 
> 
> 
> > I agree...to a point.
> > 
> > Sasser violates poorly designed/implemented
> network
> > infrastructures.
> > 
> 
> Correct, but that does not make it less a crime.
> 
> If I forget to lock my car, it does not make it
> right to steal it. I'm
> stupid, yes, and my insurance won't pay me back, but
> it still is a crime.
> 
> 
> Serge
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
http://lists.netsys.com/full-disclosure-charter.html