full-disclosure - (no subject)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

From: toddtowles at brookshires.com (Todd Towles)
Subject: (no subject)

That is the question we need to find out. But only by starting it will
we ever know. Agreed? 

-----Original Message-----
From: Barry Fitzgerald [mailto:bkfsec@....lonestar.org] 
Sent: Friday, August 13, 2004 12:11 PM
To: Todd Towles
Cc: Mailing List - Full-Disclosure
Subject: Re: [Full-Disclosure] (no subject)

Todd Towles wrote:

>As my orginial post started, I wouldn't let it up to the AV companies 
>at all. Have a separate entity (group of people like us), gain the 
>backing of big compaines and other entities and come up with some
standards.
>
>  
>
You don't even need big companies to approve or back you -- you just
need a website and the time to put into it.

It's a real need so then advertise and let the market take over.  Get
some community involvement.  Start with things that will draw people in.

The market is like gravity -- trying to force it to do something is
almost impossible if you're small.  What you want to do is grow your
project until it can reach the critical mass where it can't be ignored.

Then you use your influence to affect change. 

How serious are people with regard to fixing this problem?  Would people
put some time into a community run site that had the goal of becoming an
organization pointed towards becoming a primary depot of security
information?

                -Barry