Re: Could n3td3v win a Pwnie award?

[G D Fuego <gdfuego () gmail com>]

On Apr 27, 2008, at 3:11 PM, n3td3v <xploitable () gmail com> wrote:

> On Sat, Apr 26, 2008 at 2:13 PM, G. D. Fuego <gdfuego () gmail com>  
> wrote:
> > On Fri, Apr 25, 2008 at 10:48 PM, n3td3v <xploitable () gmail com>  
> > wrote:
> > > David, your research was responsible for the SQL Slammer Worm... but
> > > that makes you elite doesn't it, not a black hat.
> > >
> > > No wonder the UK security service is interested in you, but I  
> > > wouldn't
> > > call it an achievement, that calls you irresponsible in my view.
> >
> > David is responsible for the Slammer worm because he discovered the
> > vulnerability that it used?
>
> You don't believe in Responsible Disclosure? Every responsible
> security researcher and expert should be supporting responsible
> disclosure. David's disclosure is a prime example why responsible
> disclosure is needed.
>
> What he did *was* irresponsible, but perhaps we can learn from it.
>
> n3td3v

Read ms02-039

The patch was available 6 months before slammer, thanks to David.

Its not his fault that people didn't apply the patch



> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/