full-disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <FCAD9F541A8E8A44881527A6792F892C293B72@owa.eeye.com>
From: dcopley at eEye.com (Drew Copley)
Subject: RE:

 

> -----Original Message-----
> From: Robin Landis [mailto:rebl@...ramail.com] 
> Sent: Thursday, July 01, 2004 11:26 AM
> To: Drew Copley
> Cc: bugtraq@...urityfocus.com; 
> full-disclosure@...ts.netsys.com; ntbugtraq@...tserv.ntbugtraq.com
> Subject: 
> 
> -> The very same people are finding these big bugs. It is not 
> like there are a whole ton of unexperienced people finding 
> these bugs. These are the best. They are experts at finding 
> them. They may not always be cognizant of this themselves, 
> the act of finding them may not seem difficult to them, but 
> it is -- and this is clearly shown by the fact that the same 
> people keep finding these bugs.
> 
> I contend that the fact that the very same people are 
> reporting bugs does not mean that they are the only ones 
> finding them.  Nor does it mean that only an expert might 
> find them.  Nor does it mean that all experts would be 
> inclined to report them.

Great. Based on what evidence.