On Montag, 11. Mai 2009, Hans-J. Ullrich wrote:
> Am Montag 11 Mai 2009 schrieb Jan-Oliver Wagner:
> > we have a couple of NVTs that wrap the tool "hydra"
> > (http://freeworld.thc.org/thc-hydra/).
> >
> > Besides from being slightly out of date, I realized that this tool isn't
> > Free Software. In fact is says its GNU GPL and has some additional clauses.
> > Those clauses prevent the "use for any purpose", basically its some limits
> > on commercial aspects. I checked back with the authors and was confirmed
> > that this is not but chance but rather by intention.
> >
> > (This explains also why hydra has been removed from Debian a while ago).
> >
> > I would have preferred even a tighter integration with hydra, because it is
> > light-weight and fast.
> > However, as things are, IMHO we have no other choice than to remove the
> > hydra NVTs as people might unintendingly violate the license of hydra.
> >
> > Any concerns or other comments?
> Hi Jan,
>
> this is indeed a pity! I suggest, to add thc-hydra as a module, so the user
> is
> able and can decide, to use or drop it to his purposes.
>
> If you do not include hydra into openvas directly, but as an optional addon,
> the user may install it (either self-compiled or as a package) or not.
>
> Doing so, there is no problem using hydra in openvas.
my strong preference is to through the hydra scripts out of OpenVAS repository.
They only call for trouble, one way or another.
Ideally, the hydra package should maintain the NASL scripts.
IMHO, OpenVAS should strictly focus on using Free Software only.
> Looking at the required NVT's, I suggest to add a NVT-repository "non-free"
> for those NVT's, as I think, the same problem will face us again, not only
> with hydra.
I am strictly against a "non-free" area. This would be an explicit invitation
to people doing not-so-free stuff with OpenVAS, which IMHO is a strategic
disadvantage for OpenVAS.
Is there any user out there who applies hydra via OpenVAS?
Best
Jan
--
Dr. Jan-Oliver Wagner | ++49-541-335083-0 | http://www.intevation.de/
Intevation GmbH, Neuer Graben 17, 49074 Osnabrück | AG Osnabrück, HR B 18998
Geschäftsführer: Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
_______________________________________________
Openvas-discuss mailing list
[email protected]
http://lists.wald.intevation.org/mailman/listinfo/openvas-discuss
