full-disclosure - Re: Updates for SSH Tectia plaintext recovery vulnerability released

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <44637.1227674195@turing-police.cc.vt.edu>
Date: Tue, 25 Nov 2008 23:36:35 -0500
From: Valdis.Kletnieks@...edu
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Updates for SSH Tectia plaintext recovery
	vulnerability released

On Wed, 26 Nov 2008 04:08:26 GMT, you said:

> > http://www.catb.org/jargon/html/koans.html#id3141171

> Have you got permission to copy&paste that Valdis? Ureleet might jump
> down your neck.

Sayeth Eric Raymond himself: http://www.catb.org/jargon/html/online-preface.html

"This document (the Jargon File) is in the public domain, to be freely used,
shared, and modified. There are (by intention) no legal restraints on what you
can do with it, but there are traditions about its proper use to which many
hackers are quite strongly attached."

Also, note that since I'm in the US, that even if it had *not* been placed
in the public domain, the "Fair use" limitation on exclusive rights as
listed in 17 USC 107 applies.

http://www.law.cornell.edu/uscode/17/usc_sec_17_00000107----000-.html

In particular, note 17 USC 107 (4): ".... the effect of the use upon the potential market for or value of the copyrighted
work."  This also happens to cover the vast majority of copyrighted material
posted to Funsec - it's basically hard for the copyright owner to claim
that it's infringing when it tends to *increase* the number of hits the
original story page gets, thus increasing the value of the original. 

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/