Re: Penetration testing via shrinkware

["tqbf" <ashland () pobox com>]

> it could reasonably be expected to check for is infinite.  Scanners can never be
> complete, because the space of possible mis-configurations and buggy software
> knows no bounds.

You have a misconception about what a scanner is. The purpose of a scanner
is no more to discover all possible misconfigurations and vulnerabilities
than the purpose of a firewall is to stop all possible attacks. 

-----------------------------------------------------------------------------
Thomas H. Ptacek                          Network Security Research Team, NAI
-----------------------------------------------------------------------------
                                 "If you're so special, why aren't you dead?"