full-disclosure - Our Industry Is Seriously Ethics Impaired

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed Jul 27 18:14:10 2005
From: jasonc at science.org (Jason Coombs)
Subject: Our Industry Is Seriously Ethics Impaired

Adam Jones wrote:
> What exactly is wrong with this? I personally would rather have 3com
> buying up exploits (probably under an agreement for exclusive access)
> instead of having them sold to the highest, probably malicious,
> bidder. Even if someone sells it to both there is a more reputable
> group that has the exploit and can help with mitigation.
> 
> - Adam
> On 7/26/05, J.A. Terranson <measl@....org> wrote:
> 
>>Yet another voice baying at the moon.

Come on, Adam. Do you still not understand that the entirety of almost 
all 'security' fixes is a change to a single character on a single line 
of a single file of source code?

How much more complicated do you need to make it in order to feel safe?

3Com needs it to be so complicated that a 'Digital Vaccine' is required 
in order to make you feel healthy again. Bull. Crap. Lies.

Regards,

Jason Coombs
jasonc@...ence.org