full-disclosure - Re: security industry software license

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 10 Oct 2008 15:39:54 +0100
From: "Michael Simpson" <mikie.simpson@...il.com>
To: n3td3v <xploitable@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: security industry software license

On 10/10/08, n3td3v <xploitable@...il.com> wrote:
> >> there should be a central license that people apply for to use
> >> software like metasploit.
> >
> > You don't want to go there.
>
> let's go there anyway, and if hd moore doesn't comply, we can just
> slap some sort of law on the license to make it against the law not to
> require that downloaders have the license.
>
/snip stuff

oh you're awake
1430 start today then
not bad

anyhoo

Would this licence be from the same government that can't manage to
work out that someone claiming for 36 new kids in 2 years isn't up to
fraud?

<http://news.scotsman.com/aberdeen/Man-admits-child--benefit.4009052.jp>

Or is unable to enforce proper data protection from one of their
preferred consultants?

<http://news.bbc.co.uk/1/hi/uk_politics/7575989.stm>

Or the same government that tells the scottish ambulance service that
it is ok to send live data to yet another third party company by disc?

<http://news.bbc.co.uk/1/hi/scotland/7470006.stm>

Or which has lost 6 lappies in the last 12 months?

snip

Answered by John Swinney (Thursday, August 28, 2008): In relation to
core Scottish Government (SG) directorates and close agencies using
the SG network, six SG laptops have been lost during the last 12
months. Two of these were unused new machines lost in transit to their
intended users by the courier company.

/snip

Or should the licence be handed out by the local authorities for each
region after all they know all about due diligence?

<http://news.bbc.co.uk/1/hi/scotland/7662459.stm>

after all the whole icelandic banking system was based on one
leveraged hedge fund which most financial people wouldn't have touched
with a 60' pole

That is just the uk/scottish gov.

Why should HDM place any trust in governments to be able to decide who
should or shouldn't have access to the software he produces?

After all, your "largest sec google group" may qualify you to be
granted this whitehat ticket that you are so keen on yet any
half-hearted search of the archives would patently demonstrate that
you are *way* too volatile be allowed axs to anything that could
construed as harmful to other users of the intarweb.

mike

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/