full-disclosure - Re: Marcus J. Ranum on PaulDotCom Episode 133

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 13 Dec 2008 09:19:58 +0000
From: n3td3v <xploitable@...il.com>
To: "Valdis.Kletnieks@...edu" <Valdis.Kletnieks@...edu>, 
	full-disclosure@...ts.grok.org.uk
Subject: Re: Marcus J. Ranum on PaulDotCom Episode 133

On Sat, Dec 13, 2008 at 4:33 AM,  <Valdis.Kletnieks@...edu> wrote:
> On Sat, 13 Dec 2008 03:01:48 GMT, n3td3v said:
>> An interesting episode of PaulDotCom Security Weekly
>
> This was the same PaulDotCom that you were whining about recently?  Let me
> guess - this episode is even *more* over the top of the same stuff you
> complained about last time... *yawn* Move along, nothing to see.
>

Marcus Ranum made some very good points in the podcast:

1) Evidence should be made public to security community
2) Accusations should come from credible source (State Department)
3) Saying China too many times without the evidence weakens case
4) Cyber attacks carried out in Estonia, evidence too wavey
5) Offensive cyber attacks against nations likely to cause too much
collateral damage to spy agency's

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/