Re: [Full-Disclosure] iDefense: Solution or Problem?

2004-07-14 Thread System Outage
iDefense are BLACKHATS who pretend to be lawful whitehats, but really spend months hacking with zero-day, and when they get bored with a vulnerability, they hand it to the vendor, role playing as a responsible security group that is everyones best friend. The dark side is out there, some where! I

Re: [Full-Disclosure] iDefense: Solution or Problem?

2004-07-14 Thread VX Dude
--- "J.A. Terranson" <[EMAIL PROTECTED]> wrote: > > On Wed, 14 Jul 2004, VX Dude wrote: > > > Now, I'm no lawyer, but Hollywood has taught me > that > > its probably illegal to _knowingly_ buy illegal > goods > > (such as entersys source), but! is it illegal for > > iDefense to buy the research f

Re: [Full-Disclosure] iDefense: Solution or Problem?

2004-07-14 Thread J.A. Terranson
On Wed, 14 Jul 2004, VX Dude wrote: > Now, I'm no lawyer, but Hollywood has taught me that > its probably illegal to _knowingly_ buy illegal goods > (such as entersys source), but! is it illegal for > iDefense to buy the research from illegal bought > goods? Most likely. The legal phrase descri

Re: [Full-Disclosure] iDefense: Solution or Problem?

2004-07-14 Thread VX Dude
Just a quick thought for a business plan. 1) Start off with a low investment of $1200. 2) Buy a couple chunks of Entersys source code from SCC 3) Find vulnerabilities and write 0-day exploits 4) give 0day to your investors 5) sell 0day to iDefense (or Sourcefire hahahahaha) for $300 a pop 6) Use p

[Full-Disclosure] iDefense: Solution or Problem?

2004-07-13 Thread idefense
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael, you claim that this is a typo, but is it really? Even if this is a typo, how do you explain waiting over a month to contact the vendor? How do you explain past times when iDefense waited over a year to notify a vendor? How does this relate t