We have come under some pressure to delete part of the
information from the message disclosing the Kerberos 4
vulnerability recently posted.
We would like to publicly announce our position in
regards to the material within the Full Disclosure
mailing list archives.
We strongly feel that:
1. The archives reflect the entire mail traffic of the
list, which is composed of individual messages sent
by many different individuals.
2. The contents of these messages have become a matter
of public record once they were distributed to both
those who are subscribed to the mailing list, and
mirrored by various sites who also archive the mailing
3. It would violate the editorial integrity of the
archives and would also demonstrate a measure of
editorial control over the content of the archives
that we are not prepared to exercise.
4. That it is pointless to "delete a message" since
the message contents are already widely disseminated,
cached, stored, and otherwise ingested worldwide.
To summarize, we are sorry that we cannot comply with
any requests to delete the message in question, or any
other for that matter.
Full-Disclosure - We believe in it.