full-disclosure - Re: Media backlash begins against HD Moore and I)ruid

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Pine.LNX.4.64.0808061915290.8413@localhost.localdomain>
Date: Wed, 6 Aug 2008 19:15:51 +0000 (UTC)
From: jf <jf@...glingpointers.net>
To: Valdis.Kletnieks@...edu
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Media backlash begins against HD Moore and
 I)ruid

> And even if they *got* attacked, it's quite possible that the upsides of not
> bothering to do something outweighed the risks.  If you estimate that the
> cost (including "things you could have spent your time doing") is more than
> the losses, why bother?  "Even if we *got* whacked, we'd lose maybe $500. But
> in the time I'd waste dealing with the issue, I could generate something that
> will get us $2,000 in revenue.  So if I fix it, I lose $1500, and if I ignore
> it, I come out $1,500 ahead if we get hit, and $2,000 if we don't".

so as a student worker, thats what, like a month of your time?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/