Full Disclosure mailing list archives

Re: Re[2]: pissed off

From: Cedric Blancher <blancher () cartel-securite fr>
Date: 26 Apr 2003 17:45:32 +0200

Le sam 26/04/2003 à 16:38, Knud Erik Højgaard a écrit :

Tamer Sahin wrote:

However, the one that Secunia has found out, of which all rights
belong to me, is not a acceptable case.

What rights would these be? 
Am I not allowed to write code that expoits it?
Am I not allowed to talk about it?
Am I not allowed to claim that I found this hole too? 
If I am not, then what? Are you going to, uh-oh, sue me?


I thought vulnerabilities belonged to people who were writing vulnerable
softwares...

-- 
Cédric Blancher  <blancher () cartel-securite fr>
IT systems and networks security - Cartel Sécurité
Phone : +33 (0)1 44 06 97 87 - Fax: +33 (0)1 44 06 97 99
PGP KeyID:157E98EE  FingerPrint:FA62226DA9E72FA8AECAA240008B480E157E98EE
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

Current thread:

Xeneo Webserver Vulnerability Tamer Sahin (Apr 23)
- Re: Xeneo Webserver Vulnerability Jakob Balle (Apr 23)
  - Re: Xeneo Webserver Vulnerability badpack3t (Apr 23)
- <Possible follow-ups>
- Re: Xeneo Webserver Vulnerability badpack3t (Apr 23)
  - pissed off cyn0n (Apr 24)
    - Re: pissed off Valdis . Kletnieks (Apr 25)
    - Re: pissed off Melvyn Sopacua (Apr 26)
    - Re[2]: pissed off Tamer Sahin (Apr 26)
    - Re: Re[2]: pissed off Knud Erik Højgaard (Apr 26)
    - Re: Re[2]: pissed off Cedric Blancher (Apr 26)
    - Re: Re[2]: pissed off Halil Demirezen (Apr 27)
    - Re: Re[2]: pissed off badpack3t (Apr 26)
    - Re: Re[2]: pissed off Halil Demirezen (Apr 27)
    - Re: Re[2]: pissed off Steve (Apr 28)
    - Re: Re[2]: pissed off madsaxon (Apr 28)