full-disclosure - Re: Seeking comment on disclosure articles

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20070114134348.932.0@paddy.troja.mff.cuni.cz>
Date: Sun, 14 Jan 2007 13:53:41 +0100 (CET)
From: Pavel Kankovsky <peak@...o.troja.mff.cuni.cz>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Seeking comment on disclosure articles

On Fri, 12 Jan 2007, Ben Bucksch wrote:

> Basic idea is that vendors should have the ability to fix them without 
> the public exploiting it at the same time, [...]

They have that ability. They have always had it. The only thing they
need to do it is to get their hands dirty and find the vulnerabilities
themselves (or to hire someone else to do it under a NDA).

--Pavel Kankovsky aka Peak  [ Boycott Microsoft--http://www.vcnet.com/bms ]
"Resistance is futile. Open your source code and prepare for assimilation."

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/