full-disclosure - Re: INSECT Pro - Free tool for pentest

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 31 Aug 2011 13:36:12 +1000
From: GloW - XD <doomxd@...il.com>
To: "Randal T. Rioux" <randy@...cyonlabs.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: INSECT Pro - Free tool for pentest - New
 version release 2.7

woah!

OK so it is not that nice to deface another product, thats kinda why i do
pick on it myself but about the GPL,
well i have to help anyone on this one, including tighvnc themself, as they
did release this as open src software remember,
Let me try and explain this abit better/clearer..

Regarding the GPL,
I dont think the guy has breached it directly or indirectly.
Ofcourse, if he has, wich i dont thinkso* then he would be subject to being
sued by either TighVNC group, or Metasploit.

IF the INSECT pro exploit for tightvnc/code wich is used for that, is being
manipulated  AT ALL , that is at compile time, if it is modified from the
original code, to the end user/product.
IF that is the case, then tighVNC would be able to scrutinize the insect pro
maker,and perhaps even take it to small claims or worse, direct defamation
of product, wich would not be a good/smart thing todo for anyone.

So, i think this should clear up alittle of this small debacle wich has
broken about GPL... GPL is usually there to protect the src code in the GPL
(named), but is also, not to be used in ways wich defame, wich is why it
exists.. if tightvnc wanted to now, they could look at ALL its uses and
scrutinize them in every case, and why the code is being used. It is
something wich is verymuch now up to them and up to wether people have
modified theyre code.
regards,
xd
-------------------------------------------------------------------------------------------------

> This isnt a company making a big product, Im doing this because I like
> doing it.

Good for you. I think that is great. But you are pretending to be a "big
company." Stop that.

I am happy to see you removed that silly donation-for-download scheme.

> I'm not forcing you to use my software, if you don't like it please
> don't waste bandwith on it.

Fantastic advice.

> We are working on a JAVA version in order to support multi-plataform,
> and because I really like to JAVA

I did too, until I learned how to program. Oracle's purchase/murder also
hastened my departure.

Might I suggest C++/Qt? :-)

Randy

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/