I think iDEFENSE is great..

They keep my "trust" file updated..

begin procmailrc
# Procmail rule for no talent ass clowns
# who seek fame by reselling other sell-outs
# work.. making an excellent symbiotic relationship.
:
^Subject: *iDEFENSE*
$HOME/mail/shiznit

EOF

Then from time to time
egrep -A 5 CREDIT $HOME/mail/shiznit > ~/people.i.trust.as.much.as.i.trust.Openssh.is.secure

An important rule tho, don't waste brain cycles reading the folder.. Even tho
iDEFENSE would "never" post a vulnerability that other people know about,
because it's strictly against their policy.. but really, have they ever
posted anything that people didn't already know about via their friends and
other channels first? (like, oh.. say the apache-cvs list).

Zen Parse kicks ass. I sure hope it doesn't take him more than an hour total
for each vuln he submits to them (from research, to writing.. to dealing with
the idiots at iDEFENSE, to thinking about it.. to dwelling on himself being a
sell out, etc).. if so, he's surely getting ripped off.. He could move to
america, get a job at Symantec doing jack shit all day, come up with one vuln
a month, make a lot more money.. and be a god to them.. Because we know their
methods, they purchase their way into the industry.. I would think this would
include leet haxors that work for iDEFENSE (lets just call zen parse an
iDEFENSE employee now.. he does work.. for them, they pay him.. that makes him
an employee in some sense).

Oh.. and to keep up the spirit of Full-disclosure.

DUDE, I CANT GET TO http://www.securifytocus.com . DO YOU THINK THEY WERE
HACKED? HELP ME. HELP ME FIGURE ALL OF THE GORY DETAILS MY WEB BROWSER
IS HIDING FROM ME. THE INTERNET SCARES ME, AND MY CHILDREN.

ahem.

> Orlando (xbudg0thead.com) composed on Oct 3, 2002:

> Evidently Ben isn't well aware of all the facts. It's ok Ben you're a busy
> guy, I still think iDefense no excuse.
>
>
> On Thursday 03 October 2002 04:32 pm, Isaak Bloodlore wrote:
> > Quoting Ben Laurie (benalgroup.co.uk):
> > > This is different from, say, CERT, how?
> >
> > Not at all. Has anyone ever taken CERT seriously?
>
>
> -x
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]