full-disclosure - "responsible disclosure" explanation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Mon Aug  8 12:18:28 2005
From: guninski at guninski.com (Georgi Guninski)
Subject: "responsible disclosure" explanation

On Mon, Aug 08, 2005 at 12:58:06PM +0200, Florian Weimer wrote:
> * Georgi Guninski:
> 
> > the term "responsible disclosure" is a corporate instrument for
> > trying to shut people up.
> 
> No, it's an attempt to create a market for vulnerabilities and
> exploits, trying to mimic the underground's success.
>

i disagree. market for vulnerabilities exists, there were auctions even on fd.

i stand for my original claim.

-- 
where do you want bill gates to go today?



































































junk follows