Re: [Full-disclosure] Lazy bum approach to security

2008-12-02 Thread Ureleet
i agree.  people need 2 b more proactive, instead of reactive.

On Sat, Nov 29, 2008 at 1:16 PM, andrew. wallace
[EMAIL PROTECTED] wrote:
 On Wed, Nov 26, 2008 at 5:49 PM, Mike C [EMAIL PROTECTED] wrote:
 I'm sure theres no reason to doubt that. The fact remains full-disclosure is
 where it all happens.

 You're taking yourself into a false sense of security there. If you
 sit on a mailing list like full-disclosure and expect everything to be
 brought to you on a plate you are mistaken. You can't take the lazy
 bum approach to security and say, everything I need to know is on
 full-disclosure. From my experience the majority of stuff goes on in
 the underground communities, full-disclosure is only essentially an
 announcement list, the rest is going on in individual communities.
 What you need to do is get yourself dug into the underground
 communities, you need to get yourself informants and build
 relationships with members of communities, you _really_ can't sit on
 full-disclosure and expect every security community and hacker
 community to bring everything to you. I'm not talking about the n3td3v
 group here because luckily I forward the key stuff to full-disclosure
 for the lazy bums who can't be bothered to engaged in individual
 communities and their members. Let me say though, the real
 intelligence isn't on full-disclosure its elsewhere.

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Lazy bum approach to security

2008-11-29 Thread Some Guy Posting To Full Disclosure
Hi

I agree with you. It's just these 'underground communities' tend to be
a bunch of kiddies playing with milworm, bots, and asking help with
basic programming.

Where's the original ideas, the research, and the worth-while discussion?

I guess I described an extreme scenario, but you get the picture.

Really, tell me. If there was a friendly, 'academic'(as aposed to
'business-like') online community then show me, I'd join up in a
flash.

-- 
I'm your best best friend.

Usually I like it when you contradict me, it might help me learn. Just
don't be so angry.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/