full-disclosure - [funsec] fuzzing mailing list

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <3a166c090604170742t4957c3ees4d3faf6534a38a6b@mail.gmail.com>
Date: Mon Apr 17 15:42:20 2006
From: n3td3v at gmail.com (n3td3v)
Subject: [funsec] fuzzing mailing list

On 4/17/06, Devdas Bhagat <devdas@....homelinux.org> wrote:
>
> > Can it be spam if its not inserted into a signature.
>
> Yes.

Then Secunia has paid someone to get the rights to spam via the
Full-Disclosure footer. It might be arranged by the list owner, but
its still unsolicited for the individual user inboxes. I don't believe
Secunia or Full-Disclosure can decide what I can decide is unsolicited
to my e-mail address.

> >
> > Spam to me is when an identical peice of information is sent more than once.
> >
> > Spam to me includes URLs inserted into sigatures.
> >
> Irrelevant.

Its not irrelevant, it was on-topic for the point I was making.

>
> > Full-Disclosure allows Secunia to spam FD.
> >
> No, Secunia hosts FD.

Everyone knows this, but they didn't host it in the beginning. They
only host it, because they were told their web address would be
inserted into the footer. Its spam via the backdoor, it should be
illegal, but it isn't yet.

> > It is a very smart way for Secunia to advertise. I wonder how much
> > they paid to be able to spam everyone on FD.
> >
> > If the Secunia URL can be classed as unsolicited spam, then surely its
> > as illegal as any other spam.
> >
> > Maybe in the future companies will choose to sponsor mailing lists for
> > a socially acceptable way to spam, without facing criminal charges.
> >
> Mailing lists are _not_ a problem, as long as they are confirmed opt-in.
> (The two step process of subscribing and confirming that subscription.)

Mailing lists are a problem, and will be a bigger one in the future,
as my point was making.

No, the folks like me opt-in on the original netsys full-disclosure,
Secunia just high-jacked the list with their web address in the footer
afterwards.

> > Make an unrefuseable offer to me, and the legal way to spam will be
>                                        ^^^^^^^^^^^^^^^^^^^^^^^^^^
> No such thing exists. Either a message is unsolicited and bulk, or it
> isn't.

Sarcasm, you missed it. If Google thought I was making thousands of
dollars a year, like Full-Disclosure does by letting Secunia "sponsor"
them, Google would close my Google Groups list down quicker than shit.