On Sunday 10 March 2002 04:37, you wrote: > Excuse me?! Did it occur to you that the person may not want to divulge > info about the network s/he is protecting? Maybe the vuln is ongoing, > and they don't want anyone else 'piling on'? (spare me the 'pull it off > the net' responses. That is a trite answer, much like "Google".)
Indeed. However, it is up to one's common sense to decide whether (s)he wants to talk about it on the Internet. I tend to have slightly paranoic sense of security, so I'd never talk about ongoing security issues of the network on any public place, not even anonymously. I have few trusted friends of mine who are really good at such things, and if I have a problem I ask them for the opinion (and vice versa). Ok, some of us have friends, some of us don't, but the bottom line is to have someone you can trust. It is nice to see that people have (and could have) trust in this mailing list, but at the end of the day, it is as secure as any other public Internet service... > > help someone with malicious intents to do the bad thing. > as opposed to all the web sites, books, classes that do the same thing? I'm selfish, I don't give a damn about other peoples intentions, but care about my own. ;-) > Whoa! 'their right' to help people? If you break into (note the phrase) > my network you are not a good samaritan, you are a criminal. PERIOD! And what if you breath heavily on the phone? ;-) Following this logic I can tell you that everyone who posts anonymously is a potential criminal. Yes, there's a biiig differnce betwen the two, but I just couldn't resist the temptation. :-) > Face it, on the list we really do not know who 99% of the people posting > are. While we can glean many things from the list about a person, who > they really are is generally a mystery. That is correct, and as you said it, I don't know who you really are, and you don't know who I am. Strip out the headers and you find that no one can be trusted, after all. And maybe this is a security list faked by aliens to find out our best security experts to eliminate them, so they can konquer the Earth (seen "Independence day"?) Oh, enough paranoia... Yes, you're right, your opinions are valid, but I still don't like to talk to someone anonymous. However, I don't think they should all be executed for being anonymous. I'm just curious about giving away information. I hope it is Ok with you. -- Radoslav Dejanovic Senior Associate to Mayor's Office City of Zagreb, Croatia
