full-disclosure - Hacking Challenge?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: vxdude2003 at yahoo.com (VX Dude)
Subject: Hacking Challenge? 

While I agree that this would be a neat
web-defacement.  I personally doubt it is due to the
low "reward".  Most likely HackTrap is some WhiteHat's
idea of a silver bullet and he's using every single
GET request as proof of the huge numbers of hackers
that couldn't break in.    After some more statistics
and scare tactics, they may find a few customers. 
Gotta tip you're (white/black) hats to the security
community, they've got game!

-stinny

--- Ron DuFresne <dufresne@...ternet.com> wrote:
> On Tue, 20 Jul 2004 Valdis.Kletnieks@...edu wrote:
> 
> > On Tue, 20 Jul 2004 17:30:45 +0200, nocturnal
> <nocturnal@...hack.se>  said:
> >
> > > A co-worker has a small penetration testing
> challenge for all. There is
> > > even 1000SEK in it for the winner. Have fun and
> good luck!
> >
> > http://www.x-rates.com lists the Swedish Kroner
> >
> > http://www.x-rates.com/d/SEK/table.html
> >
> > About $137US.  Not worth more than an hour or
> two's worth of effort unless
> > you don't have a paying gig at the moment.  (As an
> aside, what value is there
> > in a pen-test that will only attract those who
> don't have easier ways of making
> > $137?  A good white-hat can make that *per hour*
> consulting, and a good
> > black-hat can do better than that in the fraud
> market....)
> >
> 
> 
> I have a different question;  how does one acertain
> that this is indeed an
> open 'hacker challenege'?  Could be a critical
> production server for the
> swedish banking system and folks tapping upon it;s
> service could end up
> finding that the legal authorities are bashing down
> the backdoor shortly
> after tapping the tcp/udp ports it might have or
> might not have exposed.
> Get-out-of-jail-free cards are not assured here are
> they?
> 
> Thanks,
> 
> Ron DuFresne
> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> "Cutting the space budget really restores my faith
> in humanity.  It
> eliminates dreams, goals, and ideals and lets us get
> straight to the
> business of hate, debauchery, and
> self-annihilation." -- Johnny Hart
> 	***testing, only testing, and damn good at it
> too!***
> 
> OK, so you're a Ph.D.  Just don't touch anything.
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
> http://lists.netsys.com/full-disclosure-charter.html
> 



		
__________________________________
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
http://promotions.yahoo.com/new_mail