Re: defining bugtraq

["worried security" <worriedsecurity () googlemail com>]

On 9/26/07, jf <jf () danglingpointers net> wrote:
also fuck pdp and gnucitizen, the only amazing part is that he has gotten
anyone to take him serious.

no, gnucitizen is a respected member of the security community.

if gnucitizen had released the 0day in full, there would be all sorts of
*worm within days* by the media. no, i think gnucitizen has done a good
deed. he has stopped vrius writers from building a worm and compromising
systems.

i very much respect the folks at gnucitizen, they are heros and are doing
the right thing by doing a *staggered disclosure*.

i think from his point of view he wanted to get the word out there he has
0day, just incase someone else discovered the same hole after him and posted
it on the mailing lists, he wanted to get in there first before other folks.

its all about credit where its due, i thank gnucitizen for *staggered
disclosure*.

its all about damage limitation, and i think gnucitizen are good people.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/