full-disclosure - Re: Fwd: Comment on: Microsoft to give partners heads-up on security vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <6158bb410808051719m10b3bd8md41fcac33795e805@mail.gmail.com>
Date: Tue, 5 Aug 2008 20:19:01 -0400
From: Ureleet <ureleet@...il.com>
To: n3td3v <xploitable@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Fwd: Comment on: Microsoft to give partners
	heads-up on security vulnerabilities

theyve been doing this 4 years.  get in the now.

On Tue, Aug 5, 2008 at 11:27 AM, n3td3v <xploitable@...il.com> wrote:
> ---------- Forwarded message ----------
> From: n3td3v <xploitable@...il.com>
> Date: Tue, Aug 5, 2008 at 4:24 PM
> Subject: Comment on: Microsoft to give partners heads-up on security
> vulnerabilities
> To: n3td3v <n3td3v@...glegroups.com>
>
>
> by n3td3v  August 5, 2008 8:17 AM
>
> Verbal contracts of non-disclosure agreements don't work, you need a
> new law in place, which I call the responsible disclosure act,
> http://seclists.org/fulldisclosure/2008/Jul/0439.html to enforce the
> agreement by a law if the agreement is broken. Or are you guys just
> gonna do another "oops the cat's out the bag" again like what happened
> with the verbal contract agreement Dan Kaminsky had with everyone
> before a blog entry leaked the vulnerability by *accident*. Is this
> Microsoft agreement of non-disclosure actually enforceable by any
> current law? If not a new law is needed to be drawn up, see the link
> above, or this "Microsoft Active Protection Program" is gonna turn out
> a complete shambles.
>
> http://news.cnet.com/8601-1009_3-10006325.html?communityId=2114&targetCommunityId=2114&messageId=772539#772539
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/