full-disclosure - Cisco's stolen code

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <5.0.0.25.2.20040525131038.03e31870@pop3.direcway.com>
From: madsaxon at direcway.com (madsaxon)
Subject: Cisco's stolen code

At 10:45 AM 5/25/2004 -0700, Harlan Carvey wrote:

>Valdis,
>
>I sincerely hope that you do not presume to speak for
>everyone...

He's not offering an opinion, merely stating a fact:
if whitehats are security researchers who don't
break the law, then they don't audit code the
possession of which is illegal.  The only
debatable point here is the definition of "whitehat,"
but that's really just a matter of semantics.
This code is the proprietary property of Cisco.
Anyone who knowingly examines it or even possesses
it without Cisco's permission is in violation of
the law in most countries, and therefore not,
by definition, acting as a "whitehat."

m5x