full-disclosure - Re: Geeks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 16 May 2008 12:53:12 -0400
From: "Garrett M. Groff" <groffg@...design.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Re: Geeks

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I think Valdis's point was valid. Why the sarcastic comments? (And what's
with the mustache wax comment?)

- - G


- ----- Original Message ----- 
From: "Fredrick Diggle" <fdiggle@...il.com>
To: <Valdis.Kletnieks@...edu>
Cc: <full-disclosure@...ts.grok.org.uk>
Sent: Friday, May 16, 2008 12:39 PM
Subject: Re: [Full-disclosure] Geeks


> thank you for the qualified opinion valdis. everyone cares very much.
> can't you see how much we are all caring. also I saw a deal on
> mustache wax the other day, email fredrick off list for linkage.
>
> On Fri, May 16, 2008 at 5:10 AM,  <Valdis.Kletnieks@...edu> wrote:
>> On Thu, 15 May 2008 09:11:37 PDT, Morning Wood said:
>>> >> Anybody who thinks a CISSP is a "license to hack" is dreadfully
>>> >> ignorant of what little overlap there is between hacking skills and
>>> >> the material covered in the CISSP.
>>>
>>> CISSP's cant hack
>>
>> Right, because the CISSP isn't about hacking. It's about risk
>> management. It's about balancing the cost of adding more security to a
>> system against the costs of an intrusion.  It's about the costs of
>> testing a disaster recovery plan, and the costs of not having a plan.
>> It's about what sort of backup schedule you should have, and what the
>> retention period on the backups should be, and why.  It's about knowing
>> how deep a background check you should make on prospective employees.
>> It's about how much security awareness training the users need.
>>
>> Hacking is a *very small* part of the security world.
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014) - not licensed for commercial use: 
www.pgp.com

wj8DBQFILbvJSGIRT5oVahwRAmU+AKD2W6WgYtDzCn/OAOy4QaTUStLBIwCfbIJT
br4mW8clF2qsH7S7TAmwTyQ=
=S3GA
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/