full-disclosure - Re: Rate Stratfor's Incident Response

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <C692F4CAEEEFCC47919467090B372DDA097EF015@hqdag02c.corp.drugstore.com>
Date: Fri, 13 Jan 2012 18:16:10 +0000
From: Michael Schmidt <mschmidt@...gstore.com>
To: "J. von Balzac" <jhm.balzac@...il.com>,
	"full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>
Subject: Re: Rate Stratfor's Incident Response

No one lives in a server, but the server certainly occupies space somewhere. Even a VM runs in a physical space somewhere. If someone attacks my server in my home, I think of that as physically being in my home. If someone were to hack into my daughters webcam, and enable it to view her, I would certainly consider that the EXACT same as being in my house, on my property. And said person would incur the same fathers wrath as any other boy who attempted such a thing.

Father has baseball bats (the 3 B's of being a father) and this father has other more powerful weapons to defend his family with.

The people out there willing to do harm remotely should not forget that there are officers of the law who will come knocking with a very real physical presence, even though the attacker was in a "virtual" world.

That's just one fathers take on things.

-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk [mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of J. von Balzac
Sent: Friday, January 13, 2012 10:01 AM
To: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Rate Stratfor's Incident Response

>> Really, calling it "breaking in" is a stretch.  You connected a 
>> computer to a publicly accessible computer network, where anyone can 
>> send anything to your computer.  If hacking such a system is 
>> "breaking in," you might as well claim that shouting across your 
>> neighbor's yard is "breaking in."
>
> Bzzzt.  Bad analogy.  A better one would be noticing your neighbor's 
> garage door is open, walking across the street, entering the garage 
> and rummaging around in his belongings.

It's obvious that all analogies are bad -- the Internet is a reality onto itself and cannot, but more importantly *should* not be compared to the physical "3d" reality. Internet has no law of gravity for instance, and certainly no garages.

Please, just focus on what is relevant. Perhaps even take one step further back to determine what actually is relevant first. Stop comparing it to arbitrary things. No one lives in a server, so it's certainly not a house.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/