full-disclosure - Re: HBGary Mirrors?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <12318.1298057282@localhost>
Date: Fri, 18 Feb 2011 14:28:02 -0500
From: Valdis.Kletnieks@...edu
To: "Cal Leeming [Simplicity Media Ltd]" <cal.leeming@...plicitymedialtd.co.uk>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: HBGary Mirrors?

On Fri, 18 Feb 2011 18:37:09 GMT, "Cal Leeming [Simplicity Media Ltd]" said:
> If illegally distributed files (such as this one) were encrypted and hosted
> on one server, and the key hosted on another, which server would
> be eligible for take down?

Questions like that are part of why FreeNet and similar systems were designed.
Nobody wants to be the test case for a simple question like that one, because
even if you win the test case, it still sucks.  So the obvious thing to do is
fix things so the simple questions aren't an issue anymore, with the hope that
the hard questions remain un-askable.

When even the person who stored the file can't tell where the file is, and
the admin of each participating server has no way of telling what got stored
on their node, it becomes really hard to draft a proper legal notice (either
a 17 USC 512 takedown notice, or subpoenas/warrants for more serious stuff).

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/