full-disclosure - Re: EXPLOITS FOR SALE (AUCTION SITE)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 8 Jul 2007 08:55:24 -0500
From: "Dave Hull" <ireadit@...il.com>
To: ascii <ascii@...amail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: EXPLOITS FOR SALE (AUCTION SITE)

On 7/8/07, ascii <ascii@...amail.com> wrote:
>
> Dave Hull wrote:
> > Yep. This is nothing new (and nothing noble), there are at least a
> > handful of web sites that will buy zero days.
> >
> > Maybe we should start zeBay.
>
> Because you are noble? Or to start something new?
>

That was a joke. I thought it was obvious.

The vulnerability researchers that I know and respect have been practicing
responsible full disclosure for years. They aren't in the business of
finding vulnerabilities so they can sell them. Responsible full disclosure
moves the software industry forward and helps us all. I believe that's more
noble than selling them to the highest bidder, but I understand some people
have to put food on their families.

-- 
ireadit@...il.com

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/