full-disclosure - Re: VUPEN Security Research - Adobe Flash Player RTMP Data Processing Object Confusion (CVE-2013-2555)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Sat, 20 Apr 2013 09:51:40 -0400
From: Lee <ler762@...il.com>
To: Sergio Alvarez <shadown@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: VUPEN Security Research - Adobe Flash Player
 RTMP Data Processing Object Confusion (CVE-2013-2555)

On 4/20/13, Sergio Alvarez <shadown@...il.com> wrote:
> Why instead of discussing about ethics about 0days, don't you discuss about
> responsible DEVELOPMENT instead?
> If products where properly designed and developed there wouldn't be 0days
> for them, would them?

Only if the designers & developers were perfect and never made mistakes.



> - sergio
> On Apr 20, 2013 2:17 PM, "Mario Vilas" <mvilas@...il.com> wrote:
>
>> I was suddenly reminded of this...
>>
>> http://www.quickmeme.com/meme/3qicaz/
>>
>> On Sat, Apr 20, 2013 at 1:05 PM, Joxean Koret <joxeankoret@...oo.es>
>> wrote:
>> > Oh, no, please not again. Are we going to talk one more fucking time
>> > about the ethics of 0-days? Please no.
>> >
>> >> Is a delay of a year before reporting to the vendor, acceptable?
>> >>
>> >> Thanks, Paul
>> >>
>> >> Paul Szabo   psz@...hs.usyd.edu.au
>> >> http://www.maths.usyd.edu.au/u/psz/
>> >> School of Mathematics and Statistics   University of Sydney
>> >> Australia
>> >
>> > _______________________________________________
>> > Full-Disclosure - We believe in it.
>> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> > Hosted and sponsored by Secunia - http://secunia.com/
>>
>>
>>
>> --
>> “There's a reason we separate military and the police: one fights the
>> enemy of the state, the other serves and protects the people. When the
>> military becomes both, then the enemies of the state tend to become
>> the people.”
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/