full-disclosure - Re: Request to publish your Proof of Concept (esc1.html)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <8e5ffb5605092611172abb466a@mail.gmail.com>
Date: Mon Sep 26 19:17:38 2005
From: gautam.bipin at gmail.com (Bipin Gautam)
Subject: Re: Request to publish your Proof of Concept
	(esc1.html)

On 9/26/05, Georgi Guninski <guninski@...inski.com> wrote:
> no.
>
> you don't have my permission.
> try buying a licence with ca$h.
>
> --
> where do you want bill gates to go today?
>
> On Mon, Sep 26, 2005 at 12:02:35PM +0300, SecuriTeam News wrote:
> > Hello,
> >
> > We at securiTeam writing about the Gecko bug of:
> > https://bugzilla.mozilla.org/show_bug.cgi?id=303213
> > You have mention on the source file that it cannot be used in vulnerability
> > databases. And we asking for your permission to publish it in our web site.

CRAZY!

WHAT/who is stoping you from rewriting the POC making slight changes
in program flow? No that ain't against the law... or is it?



--

Bipin Gautam
http://bipin.tk

Zeroth law of security: The possibility of poking a system from lower
privilege is zero unless & until there is possibility of direct,
indirect or consequential communication between the two...