full-disclosure - Secunia illegal spam and advisory republication

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Thu Apr 20 20:32:29 2006
From: n3td3v at gmail.com (n3td3v)
Subject: Secunia illegal spam and advisory republication

On 4/20/06, Morning Wood <se_cur_ity@...mail.com> wrote:
> Since you are hellbent on leather here... your oh so loved Securityfocus /
> Bugtraq
> does the same thing. Many of my own advisories are put on Bugtraq without me
> submitting directly. I guess http://www.osvdb.org is just as guilty? Perhaps
> Milw0rm too?

No, Mlw0rm tells you who discovered the vulnerability, as do other
sites. Although Secunia tell you it was all their work. I bet you
would be pretty pissed if you post one of your XSS or SQL injection,
and it appears on the Secunia website the next day saying "Secunia
FOUND". They are using the URL to get away with it and claim its their
advisory as soon as its post to FD. Folks like HP advisories put a
copyright notice at the bottom, but Secunia come along and reword the
advisory and everything without persmisson. This isn't about just copy
and pasting an advisory from a list and putting it on a website, this
is about rewording and taking credit for other peoples work.