Re: security industry software license

[n3td3v <xploitable () gmail com>]

the double edged sword of metasploit continues. while we acknowledge
its a double edged sword, does that mean we don't need to monitor the
bad edge of that sword? that is the point n3td3v has been making.


and in a news report today by cnet news, they acknowledge:


On Thursday, new code was put on the Internet that could exploit a
flaw in unpatched Host Integration Servers.

The exploit is part of Metasploit, a toolkit used by penetration
testers and criminal hackers alike.


... that criminal hackers use metasploit as well.


so shouldn't metasploit and the govt be working together to share data?

im in full support of metasploit sharing data with the govt, but the
thing you must do is have a privacy policy in place as well.


http://news.cnet.com/8301-1009_3-10068161-83.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/