full-disclosure - Re: Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CADYtyvJZ2bQQR2bE9cwH=1jtTw-1WP+91iVA56RPp8iD8143Ew@mail.gmail.com>
Date: Wed, 11 Jul 2012 10:45:16 -0400
From: Григорий Братислава <musntlive@...il.com>
To: "Mikhail A. Utin" <mutin@...monwealthcare.org>
Cc: "full-disclosure@...ts.grok.org.uk" <full-disclosure@...ts.grok.org.uk>,
	"paul.szabo@...ney.edu.au" <paul.szabo@...ney.edu.au>
Subject: Re: Full-Disclosure Digest, Vol 89,
 Issue 11: ] How much time is appropriate for fixing

On Wed, Jul 11, 2012 at 10:40 AM, Mikhail A. Utin
<mutin@...monwealthcare.org> wrote:
> Dear Paul,
> You completely missed my point. I was talking about the foundation of this list, which is free service, and the foundation of a lot of current IT technologies, which is freeware. Giving knowledge for free (including software bugs) is the foundation of this civilization. Having profit is a necessity but not all what drives us. Could you personally show any your contribution to the society? Which was not paid for?
> My contribution you can find searching/google for my name and "article", and DeepSec 2011 and OWASP AppSec DC 2012 presentations as well. Nobody paid me for. Plus, you can check our portal www.201cmr1700ma.com, which provides knowledge and security documents for free. Then, considering you association with math science, you can possibly estimate the time I've spent for free.
> So, my voice pro free knowledge distribution is completely legitimate.
>

Hello Full-Disclosure!! !! !!

Is like to warn you about is word "free."

Is electricity free? No, you is pay to use your ISP, your electricity.
Therefore, free is overabuse use of word.

Is we now describe free research to mean: "Out of pocket
vulnerability!" Is where is RFP when is needed most?

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/