Full Disclosure mailing list archives

Re: Time to patch Windows boxes with MS08-067


From: Syed Imran Ali <manipeto () yahoo co uk>
Date: Fri, 24 Oct 2008 12:35:06 +0000 (GMT)

I totally agree with Eric.. isn't it the same n3td3v who got roasted few weeks ago?? lol.....




________________________________
From: Erik Harrison <eharrison () gmail com>
To: n3td3v <xploitable () gmail com>
Cc: full-disclosure () lists grok org uk
Sent: Friday, 24 October, 2008 8:18:46
Subject: Re: [Full-disclosure] Time to patch Windows boxes with MS08-067

n3td3v, shut the hell up. this isnt some esoteric discussion about the
virtues of disclosure and good vs evil empowered by fear. patch your
shitty 3 box home network, stay the hell out of the way and dont be
part of the problem.

once you have *real world* experience, you'll answer a lot of these
questions yourself. until then, please keep your poorly thought out
comments and questions to yourself. better yet, today while you're in
class, bring them up to the teacher and discuss with the rest of the
devry hopefuls you associate with.

nobody wants to hear your shit today.

On Fri, Oct 24, 2008 at 4:12 AM, n3td3v <xploitable () gmail com> wrote:
On Fri, Oct 24, 2008 at 8:41 AM, Juha-Matti Laurio
<juha-matti.laurio () netti fi> wrote:
SANS ISC InfoCon meter is Yellow now
http://isc.sans.org/infocon.html

- why tell the bad guys you're frightened about them.

- why frighten the good guys, and be frightened?

- why rate threats to the public domain? why not keep it to yourself,
it changes nothing apart from create a fear, and then all you have to
fear is fear its self, when nothing may actually happen to you.

i don't even think we should be rating vulnerabilities either, they
should all be one of the same, we shouldn't rate terrorism threats or
hacker threat vulnerabilities or security incidents.

is it not obvious to each individual how important something is, and
allow then to give it their own rate privately, and not have a rate of
fear that we should all adhere to.

there should be no public threat levels, keep them in side your
organisation, don't outward show fear or fright, because then you've
given in before you've even started.

keep threat levels private, don't rate anything, not even microsoft
patches on patch tuesday. all threats should be one of the same.

everyone. not just sans, stop rating everything, treat everything one
of the same thing. even if you have a threat level inside your
organisation, don't outward face it publically.

hackers, dont rate your vulnerabilities, vendors dont rate
vulnerabilities, everyone don't rate anything publically.

what do rates and threat levels do for us? would we be less off
without them, would anything change if everyone suddenly stopped
rating things publically?

the world would be a better place without rates and threat levels,
everything would be a lot calmer and laid back, there would be more
peace.

n3td3v

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



      
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: