Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Vulnerability Development: Re: illegal cheer (was: Re: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)

Re: illegal cheer (was: Re: CodeGreen beta release (idq-patcher/antiCodeRed/etc.)

From: Markus Kern <markus-kern_at_gmx.net>
Date: Fri, 07 Sep 2001 20:50:06 +0200

Meritt James wrote:
>
> News flash: You and your kin are not the entire world.
>
> Wouldn't you like M$ to pay attention to those laws? Where do you think
> the vulnerabilities come from?

Laws aren't solely for Microsoft. Everyone else would be responsible for
bugs in their code, too. Imagine someone is sued because his shareware
ftp server has a buffer overflow. I bet Microsoft would love to run their
competition's software on some of their boxen just to sue them as soon as
a bug is found.

>
> Markus Kern wrote:
> >
> > Meritt James wrote:
> > >
> > > THAT is an informative statement! If a bit of consideration for the law
> > > was made, there would be many fewer vulnerabilities in the first place.
> >
> > How would consideration for the law reduce _vulnerabilities_?
> >
> > I have to agree with Michael Rudel.
> > When we're discussing the ethics/morals of something current laws are
> > irrelevant.
> > Laws are deduced from the outcome of such discussions (or that's the way
> > I think it should be).
>
> So why are YOU discussing laws, followed by a statement that what you
> wrote is irelevant?

My question was related to your statement that laws would reduce vulnerabilities.
The rest to Michael Rudel's post. Two different topics.

regards,
Markus Kern

>
> > > But thanks for the job security!
> > >
> > > "Michael R. Rudel" wrote:
> > >
> > > [snip]
> > >
> > > > It is illegal under current law, but
> > > > that doesn't mean jack to me.
> > >
> > > [snip]
>
> --
> James W. Meritt, CISSP, CISA
> Booz, Allen & Hamilton
> phone: (410) 684-6566
Received on Sep 07 2001

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
edgeos