full-disclosure - Security & Obscurity: First-time attacks and lawyer jokes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20040902192622.GC17094@sivokote.iziade.m$>
From: guninski at guninski.com (Georgi Guninski)
Subject: Security & Obscurity: First-time attacks and lawyer jokes

On Thu, Sep 02, 2004 at 12:24:29PM -0400, Peter Swire wrote:
> ......  In talking
> with people who write software, however, I was repeatedly struck by
> their observation that it takes considerable hard work and expertise to
> find new vulnerabilities....................

darling, 

you are missing the point.

i can't sing, but this does not make singing a hard (NP) problem.

what do you expect, the developers to say: "we are so fuckingly lame, so any
nonstandard kid from a third world country can fuck us hard"?.

for the sake of the argument, let's assume there are as low as 10^6 bugs in m$
warez. to take over the world (and in particular any target thereof) a kid
needs as low as 10^2 or even 10 or even 1 exploits. 
any "real world" ('tm' of god) analogies?

-- 
It's better to be a pirate than join the navy. -- steve jobs