full-disclosure - Re: Full-Disclosure Digest, Vol 19, Issue 47

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <451C6805.5090804@gce.com>
Date: Thu, 28 Sep 2006 20:25:41 -0400
From: Glenn and Mary Everhart <everhart@....com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Full-Disclosure Digest, Vol 19, Issue 47


full-disclosure-request@...ts.grok.org.uk wrote:
> Send Full-Disclosure mailing list submissions to
>
Re "virtual trust".
Yes, I disagree with introducing a new term. It seems to me to obscure what is
going on, not to enlighten. Further, many of us have been arguing for years
that security enables business and often is critical to it. There is nothing
new in that notion and while it is IMO correct, it is not a new thesis, and
does not deserve to have the trust needed suddenly called "virtual", a term
which suggests it is not "real". The only novelty has been the term, and it
is a most unhelpful choice.
   I was digging through some old papers a couple weeks ago and again, for 
example, came across 4 or so studies of a year or two ago (two, I think) which 
dealt with the throttling of e-business due to problems with trust. I've had 
this arise in personal correspondence well over a decade ago. Now, it is also 
true that new types of activity become possible with greater trustworthiness, 
but that is also not a new idea.
Glenn Everhart

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/