full-disclosure - Re: Gustav, domain name reportage

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <29296.1220158143@turing-police.cc.vt.edu>
Date: Sun, 31 Aug 2008 00:49:03 -0400
From: Valdis.Kletnieks@...edu
To: n3td3v <xploitable@...il.com>
Cc: handlers@...s.org, full-disclosure@...ts.grok.org.uk, Jon.Kibler@...t.com
Subject: Re: Gustav, domain name reportage

On Sun, 31 Aug 2008 05:23:00 BST, n3td3v said:

> 3) If accusations of domain name retailers start appearing in the
> press, I don't think the domain name retailers are
> going to be too happy, seeing as those customers at this stage haven't
> commited any offence.

And the actual *damages* would be what, exactly?

How much money was lost, or will likely be lost, as a result of this? Remember
in your discussion to include the fact that these are all *new* sites still
struggling to attract eyeballs - so you can't even claim "Gadi scared off
10% of our eyeballs" because they had *zero* eyeballs last week, so there's
no history to compare against....

Hint: read http://en.wikipedia.org/wiki/Streisand_effect and ask yourself
whether the sites in question - all *new* ones that do not have any established
users yet - are better off being mentioned or not being mentioned.  Gadi
just saved them the cost of paying some (probably shady) company to improve
their page ranking and getting them some hits...

"There's no such thing as bad publicity..."

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/