full-disclosure - (no subject)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <411CF638.1090208@sdf.lonestar.org>
From: bkfsec at sdf.lonestar.org (Barry Fitzgerald)
Subject: (no subject)

Todd Towles wrote:

>As my orginial post started, I wouldn't let it up to the AV companies at
>all. Have a separate entity (group of people like us), gain the backing
>of big compaines and other entities and come up with some standards. 
>
>  
>
You don't even need big companies to approve or back you -- you just 
need a website and the time to put into it.

It's a real need so then advertise and let the market take over.  Get 
some community involvement.  Start with things that will draw people in. 

The market is like gravity -- trying to force it to do something is 
almost impossible if you're small.  What you want to do is grow your 
project until it can reach the critical mass where it can't be ignored.  
Then you use your influence to affect change. 

How serious are people with regard to fixing this problem?  Would people 
put some time into a community run site that had the goal of becoming an 
organization pointed towards becoming a primary depot of security 
information?

                -Barry