full-disclosure - Re: Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20130124185953.GA2567@laurana>
Date: Thu, 24 Jan 2013 19:59:53 +0100
From: Stefan Weimar <full-disclosure@...is.toppoint.de>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Student expelled from Montreal college after
 finding vulnerability that compromised security of 250, 000

Hello,

Am 24. Januar schrieb Valdis.Kletnieks@...edu:

> I've seen reference to a few more details on this - namely:
> 
> 1) The kid, as part of his major, signed an ethics document.
> 2) He was either told or agreed to not run the scanner again.
> 3) He did so anyhow.

A better solution would have been to not do the steps 1 and 2 but make
an NDA ("Ok, we know and you know but that's enough by now.") instead.
I mean, some kind of responsible disclosure.

By proposing this "ethics document" it was the college being
unprofessional and not the kid.

Kind regards
Stefan
-- 
make -it ./work

GnuPG-Key: B96CF8D2 <sw@...is.toppoint.de>
Fingerprint: D8AC D5E7 6865 19B1 385F  8850 2AB7 6A82 B96C F8D2

Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/