On Tue, 10 Oct 2006, Brad Causey wrote: > Good for you, follow the proper disclosure procedures. You can't expect for > me (or anyone else) to just take your word for it. When I say validity, I > mean that these vulnerabilities haven't been verified by a reliable > authority.
fuck the proper disclosure procedures. that's how bugs get patched, and that's how halfwit infosec professionals retain unjustifiable jobs with unjustifiable pay. keep it 0day, as long as you can. secret blackhat handshakes, both IRL and on the wire. - 'cube [DTM/uH/wouldntyouliketoknow?] _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/