full-disclosure - Scandal: IT Security firm hires the author of Sasser worm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <1095778231.2078.71.camel@banshee.mythic.magic>
From: lists at ktabic.co.uk (ktabic)
Subject: Scandal: IT Security firm hires the author
	of Sasser worm

On Tue, 2004-09-21 at 05:08 -0700, Harlan Carvey wrote:
> It's pretty clear, then, how this particular example
> compares to the issue of a security firm hiring
> someone who wrote malware.  
> 
> If you need it spelled out in any more detail, please
> feel free to contact me offline.
> 
No, no need to spell it out any clearer. You made my point.
Mr. Abagnale is an expert in and on the finacial institusions and fraud,
who (in return for a reduced sentence) provided that immense knowledge
to the industry and has even worked towards getting the industry to
adopt meathods to reduce fraud by designing systems that (we hope) he
himself cannot beat.

The other is a virus writer who used a flaw developed by someone else,
and propagated by a meathod that has been used countless times before,
and really introduced nothing new.