Vulnerability Development mailing list archives

Re: Kill the DOG and win 100 000 DM


From: Shawn Badolian <Shawn_Badolian () CANDLE COM>
Date: Mon, 6 Nov 2000 07:30:31 -0800

I agree with you... I think it is more of a sales motivated publicity stunt.
"We put our box on the internet and NO-ONE could hack it"

This reminds me of Microsoft's contest, and look how well that went.
but hey for 100000DM they get a better test than using a few people at a single
company.

Regards,
Shawn Badolian





|--------+--------------------------->
|        |          Steve            |
|        |          <steve@SECURESOLU|
|        |          TIONS.ORG>       |
|        |                           |
|        |          11/04/00 12:28 PM|
|        |          Please respond to|
|        |          Steve            |
|        |                           |
|--------+--------------------------->
  >------------------------------------------------------------------|
  |                                                                  |
  |       To:     VULN-DEV () SECURITYFOCUS COM                         |
  |       cc:     (bcc: Shawn Badolian/LA/Candle)                    |
  |       Subject:     Re: Kill the DOG and win 100 000 DM           |
  >------------------------------------------------------------------|



What is a contest such as this going to prove?  That in four days a bunch of
script kiddies will pound away at a system they know nothing about?  There
is a very good chance that you will come out of this "contest" un-hacked and
again, what will that prove?

Contests such as these are not replacements for secure coding and proper
security operating procedures.  Just because someone fails to deface your
web site or root your box in four days doesn't mean that the software or
system is secure.


Current thread: