full-disclosure - The real motivations of vulnerability disclosure

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 2 Oct 2007 23:09:51 -0700
From: "Mr Frog" <hacking4froggies@...il.com>
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: The real motivations of vulnerability disclosure

For the past 10 years when a vulnerability in a major site is discovered
people freak out. I'm not debating the importance of certain site
vulnerabilities such as those exposing personal or account information. I'm
going to talk about one of those things people think, but don't speak
publicly about which involves the intentions of those vulnerability
disclosure folks. I'm going to break down these types of people and some
people in the 'industry' are going to laugh and others possibly be offended.
If you have a problem with this then we can meet in an alley for warfare,
but please don't bring salt as it burns.

http://hackingfrog.blogspot.com/2007/10/o-o-omg-frog.html

- Froggie

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/