full-disclosure - Re: [full disclosure] agile hacking?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <fc76c6280803191356r2e5dc357p6f77d2a402658d46@mail.gmail.com>
Date: Wed, 19 Mar 2008 15:56:09 -0500
From: "Michael Krymson" <krymson@...il.com>
To: "Petko D. Petkov" <pdp.gnucitizen@...glemail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [full disclosure] agile hacking?

I don't disagree at all with any of your post except the part that no one
has done this before. I think there are tons of communities online that
share information and maybe even document it on a website, from forums to
wikis to expert-exchange type places to exploit archives to mailing list
mirrors to community-driven blogs... or as mentioned, Google as the index.
You might be able to achieve the same thing as original content by taking a
particular subject and the entry on it being just links to 10 other great
resources that cover it well.

By no means am I discouraging the effort, however! Keep us posted on where
to go for more info, even if we're just going to lurk in the shadow and
watch from afar.

On Wed, Mar 19, 2008 at 10:52 AM, Petko D. Petkov <
pdp.gnucitizen@...glemail.com> wrote:

> Michael,
>
> I have no clue how it will go. However, just because no one has done
> it and there are too many IFs, it does not mean that we should not
> approach this problem. If we manage to find a way to crowdsource all
> the information in a timely manner, keep up-to-date with the latest
> and be at the time as agile as possible, heck, I don't think that
> we've wasted our time. We could even come up with a better system for
> managing information different from Wikis, forums, blogs, etc. But
> that's part of the challenge and the fun. How can you justify being
> called a hacker when we cannot resolve a problem like this one? As I
> said, for all of us the gain is more then the lost.
>
> 100 people 2 short posts = 200 posts. I can post two things in a
> single day. Can you? I think it is a good start. But this is a
> community project and without a community it wont work.
>
> On Wed, Mar 19, 2008 at 3:24 PM, Michael Krymson <krymson@...il.com>
> wrote:
> > I'm not sure a "community book" is going to make a lot of sense, have
> any...
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/