full-disclosure - Re: Project Chroma: A color code for the state ofcyber security

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4b6ee9310812042010m35a391fak53842b88817d4b2@mail.gmail.com>
Date: Fri, 5 Dec 2008 04:10:44 +0000
From: n3td3v <xploitable@...il.com>
To: "Valdis.Kletnieks@...edu" <Valdis.Kletnieks@...edu>, 
	full-disclosure@...ts.grok.org.uk
Subject: Re: Project Chroma: A color code for the state
	ofcyber security

On Fri, Dec 5, 2008 at 3:59 AM,  <Valdis.Kletnieks@...edu> wrote:
> On Fri, 05 Dec 2008 03:48:49 GMT, you said:
>
>> answer that on this list? A sweeping guess would be red for danger,
>
> No, if you sell security products, you *dont* want it to be red, because
> that gives the impression that your already-deployed sales aren't doing
> a good enough job of stopping the badness.
>
> "It's RED, buy our product."
> "Why? If your product actually *worked*, why should it be RED?"
>

I'm coming to the conclusion that most folks benefit from it being at
a moderate level, between green and amber. They can flick it between
the two and not get into too much trouble, while keeping observers
stimulated with interest?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/