Re: Publishing exploit code - what is it good for

[Jason Coombs <jasonc () science org>]

> What I need is a security administrator, CSO, IT manager or sys admin 
> that can explain why they find public exploits are good for THEIR 
> organizations. Maybe we can start changing public opinion with regards 
> to full disclosure, and hopefully start with this opinion leader.

You won't find any such persons. Nobody reads SEC disclosure statements 
from public companies, either, nor do they listen to investor conference 
calls (http://www.fulldisclosure.com) or read company press releases or 
watch C-SPAN to see what their government is busy doing to them.

Shut 'em all down. They're a big waste of time and money, and they only 
help the bad guys on all sides of the bellum omnium contra omnes. The 
good guys get what they need by reading glossy print magazines.

Regards,

Jason Coombs
jasonc () science org
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/