Re: [Full-disclosure] Re: Help put a stop to incompetent computer fore nsics

2005-08-12 Thread J.A. Terranson

On Sat, 13 Aug 2005, Fergie (Paul Ferguson) wrote:

> ...and let me remind you, Mr. Terranson, that the majority
> of information that originates from SANS (primarily from the
> ISC Daily Handlers Diary, and DSHield.org), is far more
> substantive that the juvenile B.S. that goes on in this
> forum most of the time.

H... Hit a nerve, did I?  How odd.

> But, of course, you knew that already, right?

Sure enough.  So?

> Being a "for-profit" organization is not the Sign of the Beast;

No, it is certainly not The Sign Of The Beast - but it *is* a powerful
incentive to see things in a certain light.  There is no possibility of
disinterest here.

> the last time I checked, it was a Good Thing (tm), insofar as
> being truthful, honest, and doing a service to the online community.

Oh, I wouldn't necessarily go that far.  Like I said, I realize it's a
minority position, and an unpopular one on top of it, but SANS is not
exactly one of my "suggested role models".  I'd place them in the same
group as ISACA, ISC2, etcetera.  There's a lot of great stuff in there,
but theres a pretty [un]healthy dose of evil mixed in as well.

Regardless of whether I personally agree or disagree with any SANS
policy/practice/whatever, the message here is a legitimate one.  That you
would rather take it as some sort of personal attack is strictly your
personal problem - the message is a generic one (that equally covers a
boatload of entities).

> - ferg
>
> p.s. You call that cheap shot "full dsiclosure"?

First of all, it was not "a cheap shot" - get a grip Paul.  As for the
"disclosure" question, it's as disclosure-ish as anything else here: look
around a little!

-- 
Yours,

J.A. Terranson
[EMAIL PROTECTED]
0xBD4A95BF


I like the idea of belief in drug-prohibition as a religion in that it is
a strongly held belief based on grossly insufficient evidence and
bolstered by faith born of intuitions flowing from the very beliefs they
are intended to support.

don zweig, M.D.

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Re: Help put a stop to incompetent computer fore nsics

2005-08-12 Thread Fergie (Paul Ferguson)
...and let me remind you, Mr. Terranson, that the majority
of information that originates from SANS (primarily from the
ISC Daily Handlers Diary, and DSHield.org), is far more
substantive that the juvenile B.S. that goes on in this
forum most of the time.

But, of course, you knew that already, right?

Being a "for-profit" organization is not the Sign of the Beast;
the last time I checked, it was a Good Thing (tm), insofar as
being truthful, honest, and doing a service to the online community.

- ferg

p.s. You call that cheap shot "full dsiclosure"? 


-- "J.A. Terranson" <[EMAIL PROTECTED]> wrote:

> http://www.sans.org/resources/glossary.php

While I realize that this is not going to be a wildly popular point, let
me remind you that SANS is not the kind of place I would use as an
authoritative reference in terms of debate.  SANS is a for profit corp.,
and was run as such even when they were playing possum as a non-profit.
They are *not* a "disinterested third party" any more than the anti-virus
firms are - and not many people would use *them* as an authoritative
reference (assuming of course that there are other sources).

-- 
Yours,

J.A. Terranson
[EMAIL PROTECTED]
0xBD4A95BF

--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 [EMAIL PROTECTED] or [EMAIL PROTECTED]
 ferg's tech blog: http://fergdawg.blogspot.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Re: Help put a stop to incompetent computer fore nsics

2005-08-10 Thread Fergie (Paul Ferguson)
*plonk*

--filtered--


[snip]

Jason Coombs
[EMAIL PROTECTED]

[snip]


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Re: Help put a stop to incompetent computer fore nsics

2005-08-10 Thread Fergie (Paul Ferguson)
Hello? I can't believe I'm getting suckered into this...

Wikipedia:
Trojan horse (computing): In the context of computer
software, a Trojan horse is a malicious program that
is disguised as legitimate software. The term is derived
from the classical myth of the Trojan horse.
http://en.wikipedia.org/wiki/Trojan_horse_%28computing%29

Dictionary.com:
Trojan horse
n.
1. A subversive group or device placed within enemy ranks.
2. The hollow wooden horse in which, according to legend,
Greeks hid and gained entrance to Troy, later opening the
gates to their army.
3. Computer Science. A program that appears to be legitimate
but is designed to have destructive effects, as to data
residing in the computer onto which the program was loaded.

- ferg


-- Jason Coombs <[EMAIL PROTECTED]> wrote:

Thierry Zoller wrote:
> Or in better English :
> A computer trojan horse is a program which appears to be something good,
> but actually conceals something bad.

Interesting. What dictionary are you reading this definition from?

[snip]

Jason Coombs
[EMAIL PROTECTED]


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 [EMAIL PROTECTED] or [EMAIL PROTECTED]
 ferg's tech blog: http://fergdawg.blogspot.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/