full-disclosure - Re: Could n3td3v win a Pwnie award?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4b6ee9310804271854o700fac63qc59daa9e8df923ce@mail.gmail.com>
Date: Mon, 28 Apr 2008 02:54:28 +0100
From: n3td3v <xploitable@...il.com>
To: full-disclosure@...ts.grok.org.uk, n3td3v <n3td3v@...glegroups.com>
Subject: Re: Could n3td3v win a Pwnie award?

On Sun, Apr 27, 2008 at 8:27 PM, G D Fuego <gdfuego@...il.com> wrote:
>
>
>
>  On Apr 27, 2008, at 3:11 PM, n3td3v <xploitable@...il.com> wrote:
>
>
> > On Sat, Apr 26, 2008 at 2:13 PM, G. D. Fuego <gdfuego@...il.com> wrote:
> >
> > > On Fri, Apr 25, 2008 at 10:48 PM, n3td3v <xploitable@...il.com> wrote:
> > >
> > > > David, your research was responsible for the SQL Slammer Worm... but
> > > > that makes you elite doesn't it, not a black hat.
> > > >
> > > > No wonder the UK security service is interested in you, but I wouldn't
> > > > call it an achievement, that calls you irresponsible in my view.
> > > >
> > > >
> > >
> > > David is responsible for the Slammer worm because he discovered the
> > > vulnerability that it used?
> > >
> >
> > You don't believe in Responsible Disclosure? Every responsible
> > security researcher and expert should be supporting responsible
> > disclosure. David's disclosure is a prime example why responsible
> > disclosure is needed.
> >
> > What he did *was* irresponsible, but perhaps we can learn from it.
> >
> > n3td3v
> >
> >
>
>  Read ms02-039
>
>  The patch was available 6 months before slammer, thanks to David.
>
>  Its not his fault that people didn't apply the patch

David has to take some responsibility for what happened, he can't put
it all on Microsoft and the rest of the world.

All the best,

n3td3v

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/