Message-ID: <fe37588d0712130010m49088643j1dbc2dbe933c4ccc@mail.gmail.com>
Date: Thu, 13 Dec 2007 00:10:56 -0800
From: "Kristian Erik Hermansen" <kristian.hermansen@...il.com>
To: "Andrew A" <gluttony@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Full-Disclosure Digest, Vol 34, Issue 31

On Dec 12, 2007 9:01 PM,  "Andrew A" <gluttony@...il.com> wrote:
> PPS-- Namedropping the head of a project you plagiarized from in your cover
> letter is not good policy. Especially in this industry. Its a smaller world
> than most, and now you're blackballed buddy. You'll work as desktop support
> at FOX forever. On this list you may act like the lack of credit was some
> sort of forgetful slip, but most people have been relayed by now that you
> directly claimed authorship of said shellcode in an interview.

Andrew, you certainly are misinformed.  I did not claim authorship for
anything, as you say.  I don't even know who this individual is that
you are talking about.  The only thing I can think of that you have
mentioned is something I put together for H D Moore and the metasploit
team to resolve the licensing issues for getting msf3 into Ubuntu's
multiverse repository.  You can see the full efforts of this, and some
of my code, at the link below...

https://bugs.launchpad.net/ubuntu/+bug/102212

Some stuff was sent to the msfdev list as well, so if you are on that
team, you would know.  All I wanted to do was clean up the msf3 code
to meet Debian package specifications.  However, it was not possible
to get msf3 into Debian/Ubuntu without violating the Metasploit
license.  H D did say they may rewrite the license in a future
version.  Even if I mentioned this msf3 effort during an interview,
and I don't even recall if I did, then your point is still moot.  I
tried to do something for the community of users who run msf on Linux,
which was make metasploit more accessible to them.  If you think
that's bad, then thats fine.

This whole discussion started with presenting the fact that the
favicon issue could be a useful attack vector that people may not have
thought of before.  I can't change the fact that people in the
security community will always be hostile.  There is something about
this community, and it doesn't happen like this anywhere else, where
people can be just so belligerent.  I try to have fun and have a good
time in/out of work, and maybe you don't know that about me.  I am
light-hearted and enjoy the company of my peers.  Ask anyone who has
had a drink with me, or even too many drinks!  We always have fun.
Even if I poke fun at people, it is usually in a fair way, showing
reason to feel that way.  Your attitude is based on things which are
made up, false, and you have no base to stand on with such hostility.
Just turn that frown upside-down and remember that life shouldn't be
so serious.  Take it easy and have fun.  It is not the end of the
world.  I will buy some beers to chill your hot head if you like...
-- 
Kristian Erik Hermansen
"I have no special talent. I am only passionately curious."

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists