full-disclosure - Scandal: IT Security firm hires the author of Sasser worm

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.61.0409202243070.2125@locutus.isu.edu>
From: galt at locutus.isu.edu (John Galt)
Subject: Scandal: IT Security firm hires the author of
 Sasser worm

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Mon, 20 Sep 2004, bb wrote:

> If he has fulfilled all the obligation of his sentence, whats wrong with him
> being allowed to seek gainful employment that plays to his skills?

He hasn't even been sentenced yet, or in fact tried...  However, from the 
press release, Securepoint is hiring him BECAUSE he wrote Sasser, so 
"innocent until proven guilty" doesn't work either, Securepoint is 
assuming he's the guilty party and hiring him before he's even started 
paying his Debt to Society.

> Second chance anyone? Being allowed to learn from his mistakes?

When he's actually learnt, no problems.  I don't think he's actually 
learnt, since he hasn't owned up to it yet, which is a precursor to 
learning.

>
> ----- Original Message -----
> From: "Feher Tamas" <etomcat@...email.hu>
> To: <full-disclosure@...ts.netsys.com>
> Sent: Monday, September 20, 2004 10:21 AM
> Subject: [Full-Disclosure] Scandal: IT Security firm hires the author of
> Sasser worm
>
>
>> Hello,
>>
>> The german IT security company "Securepoint" has hired Sven
>> Jaschan, who wrote and spread the Sasser Internet worm,
>> which caused widespread and costly damages to legions of
>> Windows computers.
>>
>> He will work as a developer for security softwares such as
>> firewalls.
>>
>> This is a scandal! Whether or not you like the 250k USD
>> head-hunting bounty which Microsoft Corp. paid to have Mr.
>> Jaschan nailed, he is still a criminal.  Hiring him is a
>> taboo. It is totally unacceptable to picture him as a modern
>> age Robin Hood or freedom fighter. He is a criminal, similar
>> to an arsonist, who sets a house alight and the fire spreads
>> to an entire city.
>>
>> I urge all to boycott the Securepoint and I urge those who
>> suffered losses due to the Sasser worm to sue Securepoint
>> and seek damages. VXing must end and we must send a strong
>> message to teenagers that cracking is not hacking and will
>> not be tolerated.
>>
>> Securepoint website:
>> http://www.securepoint.cc/
>>
>> Info about Sven Jaschan's hiring:
>> http://www.f-secure.com/weblog#00000296
>>
>> Sincerely: Tamas Feher from Hungary.
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

- -- 
The Internet must be a medium for it is neither Rare nor Well done!
<a href="mailto:galt@...utus.isu.edu">John Galt </a>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Made with pgp4pine 1.76

iD8DBQFBT7J2+TX+nYGFQPsRAlPvAJ9DKL5HEIdRvzI8vvzM3G9vlUWKRQCgmIh3
2QExtsJP31PWL2oRd4rWDm4=
=DelD
-----END PGP SIGNATURE-----