[liberationtech] Foxacid payload

Griffin Boyce griffin at cryptolab.net
Thu Jul 17 14:57:19 PDT 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andy Isaacson wrote:
>> this is exactly why some who have received these payloads are
>> sitting on them, rather than disclosing.
> 
> Hmmm, that seems pretty antisocial and shortsighted.  While the
> pool of bugs is large, it is finite.  Get bugs fixed and get
> developers to write fewer bugs going forward, and we'll rapidly
> deplete the pool of 0day and drive up the cost of FOXACID style
> deployments.
> 
> Forcing deployments to move to more interesting bugs will also
> give insight into IAs' exploit sourcing methodologies.

  Solidarity is really important here.  "Increased security for those
who actively set honeytraps" doesn't really scale at all, and most
people will never reap the rewards of this work. =/  Forcing the
government and defense contractors to burn through 0day at a high rate
is far, FAR better than coming across one or two on your own and
hiding it.  These backdoors need to be revealed if we're to protect
ourselves.

  Let's sunburn these motherfuckers.

~Griffin

- -- 
Wherever truth, love and laughter abide, I am there in spirit.
- -Bill Hicks
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Icedove - http://www.enigmail.net/

iQEcBAEBAgAGBQJTyEa/AAoJEAPPSgqzx5pjH8cH/RoDfbJUWc8saUF0kN9h4NfX
KFv0/4Ayv7f/FqU1rnWNCcvap9Yb+ud61+RkfjCLki+iq9Q+grKLF1HdSN6vRLRK
v4dhgbN+X5Inu6DzXirbMIqjAfauQjxBXHX4ZC5MjE3AYa/G9vF34q1o3H9uKiKm
n0NYlstSdN/xJprHU1QKD1K5pncLp/+d2KDSn8LTJ1Fk048rwlOjN82xeCQvC9G9
9FFcPMkT9nS/EI2xIWpOcpI430lGGhxfPSmgrQNA9vGkdQxF6AZJqoBrkE0Ov55t
sblM8DxblEzRZinv6JF+0ko60mcHXQna83F/OXNCPr1QdubvM2XDwWA4mHeRoIs=
=gdo2
-----END PGP SIGNATURE-----



More information about the liberationtech mailing list