full-disclosure - Re: defining bugtraq

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <67ea64530709260811l71ff178bl9e7ed19064a5f64c@mail.gmail.com>
Date: Wed, 26 Sep 2007 16:11:56 +0100
From: "worried security" <worriedsecurity@...glemail.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: defining bugtraq

On 9/26/07, jf <jf@...glingpointers.net> wrote:
also fuck pdp and gnucitizen, the only amazing part is that he has gotten
anyone to take him serious.

no, gnucitizen is a respected member of the security community.

if gnucitizen had released the 0day in full, there would be all sorts of
*worm within days* by the media. no, i think gnucitizen has done a good
deed. he has stopped vrius writers from building a worm and compromising
systems.

i very much respect the folks at gnucitizen, they are heros and are doing
the right thing by doing a *staggered disclosure*.

i think from his point of view he wanted to get the word out there he has
0day, just incase someone else discovered the same hole after him and posted
it on the mailing lists, he wanted to get in there first before other folks.

its all about credit where its due, i thank gnucitizen for *staggered
disclosure*.

its all about damage limitation, and i think gnucitizen are good people.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/