[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-disclosure] defining bugtraq
From:       "worried security" <worriedsecurity () googlemail ! com>
Date:       2007-09-26 15:11:56
Message-ID: 67ea64530709260811l71ff178bl9e7ed19064a5f64c () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


On 9/26/07, jf <jf@danglingpointers.net> wrote:
also fuck pdp and gnucitizen, the only amazing part is that he has gotten
anyone to take him serious.

no, gnucitizen is a respected member of the security community.

if gnucitizen had released the 0day in full, there would be all sorts of
*worm within days* by the media. no, i think gnucitizen has done a good
deed. he has stopped vrius writers from building a worm and compromising
systems.

i very much respect the folks at gnucitizen, they are heros and are doing
the right thing by doing a *staggered disclosure*.

i think from his point of view he wanted to get the word out there he has
0day, just incase someone else discovered the same hole after him and posted
it on the mailing lists, he wanted to get in there first before other folks.

its all about credit where its due, i thank gnucitizen for *staggered
disclosure*.

its all about damage limitation, and i think gnucitizen are good people.

[Attachment #5 (text/html)]

<div><span class="gmail_quote">On 9/26/07, <b class="gmail_sendername">jf</b> &lt;<a \
href="mailto:jf@danglingpointers.net">jf@danglingpointers.net</a>&gt; wrote:</span><br>also \
fuck pdp and gnucitizen, the only amazing part is that he has gotten <br>anyone to take him \
serious.<br>&nbsp;</div> <div>no, gnucitizen is a respected member of the security \
community.</div> <div>&nbsp;</div>
<div>if gnucitizen had released the 0day in full, there would be all sorts of *worm within \
days* by the media. no, i think gnucitizen has done a good deed. he has stopped vrius writers \
from building a worm and compromising systems. </div>
<div>&nbsp;</div>
<div>i very much respect the folks at gnucitizen, they are heros and are doing the right thing \
by doing&nbsp;a *staggered disclosure*.</div> <div>&nbsp;</div>
<div>i think from his point of view he wanted to get the word out there he has 0day, just \
incase someone else discovered the same hole after him and posted it on the mailing lists, he \
wanted to get in there first before other folks. </div>
<div>&nbsp;</div>
<div>its all about credit where its due, i thank gnucitizen for *staggered disclosure*.</div>
<div>&nbsp;</div>
<div>its all about damage limitation, and i think gnucitizen are good people.</div>



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

[prev in list] [next in list] [prev in thread] [next in thread]