full-disclosure - Re: full disclosure is an intelligence blackhole

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <10482.1267464319@localhost>
Date: Mon, 01 Mar 2010 12:25:19 -0500
From: Valdis.Kletnieks@...edu
To: intel unit <n3td4v@...h.ai>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: full disclosure is an intelligence blackhole

On Mon, 01 Mar 2010 08:06:23 GMT, intel unit said:

> Let's just say we haven't been able to release any information to
> the public for over a year now.
> 
> We don't have anywhere we can post information.

You can post to Bugtraq, your own blog, pass it to people you know on F-D that
might pass along any *actual* new info you have, send it to the US CERT (who
are perfectly willing to take reports from outside the borders), etc etc etc.
I know even if I was banned from F-D and every other list I was on, I could
easily scare up 3 or 4 dozen people I could mail privately and at least one
of them would pass the info along to those who need to know.

> Isn't it a security risk to ban one the biggest security &
> intelligence groups in the UK from posting?

Now, is that merely "biggest", or is there anybody with actual security clout?
L0pht was never big, but they had clue and clout.  50,000 wannabies may be
biggest, but not have clout.

> A security & intelligence group with over 6000 security
> professionals in jobs around the world who make up the n3td3v
> group, banned from making announcements relating to national
> security matters.

And if you're an intelligence group with 6,000 professionals, *somebody* should
have a list of likely contacts. In fact, that's something that should make
you think for a moment - if there's 6,000 people, and *one* of them is banned
from this *one* list, who are these *other* 5,999 professionals who are so
incompetent that they can't get the word out for you? Please let us know, so
we can avoid hiring them.  

Seriously guys - 6,000 *professionals* and *not one* of you can find your ass
with both hands, a flashlight, and a map?

It's been a long time since I laughed so hard I almost wet myself. Thanks
for the Monday humor. ;)

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/