Full Disclosure mailing list archives

Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release

From: Florian Weimer <Weimer () CERT Uni-Stuttgart DE>
Date: Wed, 29 Jan 2003 17:50:30 +0100

Strategic Reconnaissance Team <recon () snosoft com> writes:

It is possible to prove a vulnerability exists by releasing well written
advisories.  Because of this fact, proof of concept code (exploit
source) is not a requirement for the education of the possibly
vulnerable.


If you don't publish such code, you will eventuall kill projects like
Nessus and Snort by starvation.  Is this your intention?

-- 
Florian Weimer                    Weimer () CERT Uni-Stuttgart DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release, (continued)
- Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release David Howe (Jan 29)
  - Re: Full Disclosure != Exploit Release Paul Schmehl (Jan 29)
    - Re: Re: Full Disclosure != Exploit Release hellNbak (Jan 29)
    - RE: Re: Full Disclosure != Exploit Release Richard M. Smith (Jan 29)
    - Re: Re: Full Disclosure != Exploit Release Georgi Guninski (Jan 29)
    - Re: Re: Full Disclosure != Exploit Release KF (Jan 29)
    - Re: Re: Full Disclosure != Exploit Release Blue Boar (Jan 29)
  - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release ATD (Jan 29)
- Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Georgi Guninski (Jan 29)
  - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Strategic Reconnaissance Team (Jan 29)
- Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Florian Weimer (Jan 29)
  - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Strategic Reconnaissance Team (Jan 29)
- Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release backed . up . by . 2048 . bit . encryption (Jan 29)
  - RE: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Richard M. Smith (Jan 29)
    - RE: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Ron DuFresne (Jan 29)
    - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Kevin Spett (Jan 29)
    - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Day Jay (Jan 29)
    - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release hellNbak (Jan 29)
    - Re: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release Kevin Spett (Jan 29)
- RE: [Secure Network Operations, Inc.] Full Disclosure != Exploit Release backed . up . by . 2048 . bit . encryption (Jan 29)