4 ms·

So you're advocating a permit system for, say, having a copy of nmap? Don't tell me we need to go back to that discussion again?

• hueving 11y ago
  No, 'nmap' is not a vulnerability. I'm advocating to hold people responsible that sell vulnerabilities to the highest bidder under the full knowledge that the bidder will not tell the manufacturer and will use it for nefarious purposes. It's nearly impossible to enforce something like this because of anonymous markets and crypto currencies, but we should at least shame people that advocate for it or admit to doing it.
  • dogma1138 11y ago
    Nmap has modules that can detect and exploit basic and often old vulnerabilities.
  • roel_v 11y ago
    What we need is to destroy the idea that somehow vendors can expect others to do their security work for them. Full disclosure all the way, and put the pain with those who are the root cause: customers who don't want to pay what it costs to develop secure software, or what it costs to implement secure processes (i.e., airgapped infrastructure).