full-disclosure - Re: Project Chroma: A color code for the state ofcyber security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sun, 30 Nov 2008 19:56:58 -0800
From: "Tomas L. Byrnes" <tomb@...neit.net>
To: "rholgstad" <rholgstad@...il.com>,
	"Mike C" <mike.cartall@...il.com>
Cc: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Project Chroma: A color code for the state
	ofcyber security

Can we have patterns, so it's accessible? :-)

My point was it's been done, in a data driven manner, so any utility
that might be realized from such a scheme has already been provided.

I make no representations regarding the utility of colors, but I do use
the numeric value to bias how sensitive my SIM/SEMs are to IDS alerts.

>-----Original Message-----
>From: rholgstad [mailto:rholgstad@...il.com]
>Sent: Sunday, November 30, 2008 7:37 PM
>To: Mike C
>Cc: Tomas L. Byrnes; Full Disclosure
>Subject: Re: [Full-disclosure] Project Chroma: A color code for the
>state ofcyber security
>
>Do you actually want to go this route after seeing dhs being laughed at
>daily with their retarded color scheme? You realize that color schemes
>do nothing for real security and are just more policy BS right?
>
>Mike C wrote:
>> Yes,
>>
>> The project Chroma leads know of various efforts. But these are
either
>> vendor specific, or old and unstandardized. Project Chroma aims to be
>> very active, and will look to interact with security vendors to
>> implement the color codes in security products.
>>
>>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/