full-disclosure - Re: Web Application Security Awareness Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <82abd3a70804160113s14189dadkbbca01fbc675c5f@mail.gmail.com>
Date: Wed, 16 Apr 2008 09:13:40 +0100
From: "Michael Simpson" <mikie.simpson@...il.com>
To: full-disclosure@...ts.grok.org.uk
Cc: websecurity@...appsec.org
Subject: Re: Web Application Security Awareness Day

On 4/16/08, n3td3v <xploitable@...il.com> wrote:
> On Tue, Apr 15, 2008 at 7:24 PM, Jeff Stebelton
> <jeff.stebelton@...il.com> wrote:
> > On Tue, Apr 15, 2008 at 12:32 PM, n3td3v <xploitable@...il.com
> >
> > <mailto:xploitable@...il.com>> wrote:
> >  >
> >  >
> >  >
> >  >     Why May 1st 2008? Because web applications are closely related to
> >  >     e-commerce
> >  >     and May Day is a common day for peaceful anti-capitalism protests, so
> >  >     it makes sense
> >  >     to be on this day.
> >  >
> >  >
> >  > ------------------------------------------------------------------------
> >
> >  I almost missed this little jewel, having the inestimable Mr. "n3td3v"
> >  in my junk list (anyone else think it odd he always refers to himself in
> >  the third party?)
> >
> >  I want to see if I can follow the logic here. May 1st is a common day
> >  for ANTI-capitalism protests. Web applications are tied to e-commerce.
> >  Therefore, the day you *protest* commerce is the perfect day to hold a
> >  contest that conceivably you wish to help make commerce more *secure*?
> >  These threads never  fail to provide some comic relief just when I need it.
>
> i was just trying to bring awareness to web application security, not
> have a protest against capitalism, and like you say posting
> vulnerabilities in web applications is pro capitalism, so i don't see
> where the problem is. having it on may the 1st is just more shock and
> awe and is more likely to get attention towards web application
> security. there is no protest, there is web application security
> awareness day, it just makes it more interesting being on may day. if

/schhhnip

think i will print this off and use it when explaining "pressure of
speech" to my students

<http://en.wikipedia.org/wiki/Pressure_of_speech>

cocaine induced mania

mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/