full-disclosure - Re: on xss and its technical merit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <1054503519-1194205361-cardhu_decombobulator_blackberry.rim.net-614028143-@bxe006.bisx.prod.on.blackberry>
Date: Sun, 4 Nov 2007 19:42:25 +0000
From: gjgowey@....blackberry.net
To: "Full Disclosure" <full-disclosure@...ts.grok.org.uk>, reepex@...il.com
Subject: Re: on xss and its technical
	merit

My thoughts are that if I take my car to Ford for maintenance then I don't want them to not put down that a bulb burnt out because it's "lame."  It's often the little problems that lead to far bigger problems later.  Evaluating if something should be reported or not based on "lameness" is unprofessional and has no real world value.

Geoff

Sent from my BlackBerry wireless handheld.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/