Re: [Full-disclosure] For Sale: Security Vulnerability Database Company

[System Outage <system_outage@xxxxxxxxx>]

Greetings, GroundZero Security,
   
  I don't believe http://g-0.org is all that pioneering, infact its pretty much 
a boring website. The n3td3v group is at the cutting edge of bringing breaking 
news to the security community from various news sources throughout cyber 
space. We also work closely with our relationships within the security industry 
to bring about saftey and security to the major dot-com players globally. We 
believe in a free democratic web, where people can utilise our database and 
security news wire resource. We break the news thats happening around the 
world, as it happens, in one easy to use, fully functional professional global 
operation. We are responsible for diverting major attacks upon some of the 
biggest names in the corporate circuit, just because sad kiddo hiding behind a 
"GroundZero Security" name doesn't read about it on f-d doesn't mean its not 
happening. We have folks from around the corporate and underground industry 
signed up to our members list, and we continue to power ahead an
 d grow
 stronger with our public operation over at Google Groups, and further more, 
behind closed doors in the underground. You may have an opinion, but its 
trashed into our mail bin everytime. Keep the feedback coming. As for buying a 
domain, you're kidding right? "Buy" a domain? Tut tut, you're not upto date 
with things are you. I don't think any security group is about to buy a domain, 
and further more, allow everyone to investigate the source. While we're at 
Google, we're protected from the data protection law under Google, and if folks 
from the secret service want to get information into us, then they can go 
through the courts, have a nice day and stuff. ;-) We're globally massive right 
now, while http://g-0.org remains a wet fart on the sad side of life, yeah 
dude, eat your moms pussy out and have a nice life, arse hole. We might buy a 
domain if its with your credit card, he he. However that was a nice attempt to 
take our yahoo cookie a few months ago using a disclosed vulnera
 bility
 you didn't find. You setup an embedded script into a legitimate f-d thread and 
sent it to n3td3v@yahoo dot com, even tho that account isn't subscribed to f-d, 
it stuck out like a sore thumb and it was sent straight to our relationships 
over at security at yahoo-inc.com. Ha ha ha, keep your bullshit coming, theres 
more than enough of us to wipe you off the face of the earth. Keep your shit 
coming, its bound to give us entertainment, to laugh and point fingers at your 
pathetic lameness, and of course, http://g-0.org is the leetest site known to 
all the security communtiy. Yes, you're leading the way in security, not us, 
how could we forget. There you have it, plenty of quotes to keep the kiddie 
community of f-d entertained. I'm sure the certified security professionals 
will appreciate your lame ramblings against the international n3td3v security 
group. Lame ramblings, which are of course going to follow this message, 
because as history has proved in the past, you just can't he
 lp
 yourself, mr attention seeker. Keep the shit coming. And of course, we look 
towards http://g-0.org's source code for mad HTML tips! 
:):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):):)
 Copy and paste quote snips from that, we'll be back with another chunk of data 
to bounce your opinion off ours. Dickhead...
   
  Best wishes and wet farts and stuff,
   
  n3td3v

GroundZero Security <fd@xxxxxxx> wrote:
          Noone takes a google group serious get a real domain.
  the n3td3v thing is just a site thrown together so they can
  put up adsense and make some cash. It looks totally unprofessional,
  yet they claim its build from "software developers, international hackers, 
  security researchers, online media journalists, system administrators, 
  incident response professionals, top thinkers and security aware peoples"
  and not even one of them has skills in html or even 10 bucks to buy a domain?
  yeah right......... :-)
    ----- Original Message ----- 
  From: System Outage 
  To: full-disclosure@xxxxxxxxxxxxxxxxx 
  Sent: Thursday, March 09, 2006 10:14 PM
  Subject: Re: [Full-disclosure] For Sale: Security Vulnerability 
DatabaseCompany 
  

Thats a complete exaduration actually, theres no query on the group that would 
come up with 5,000 results. The n3td3v group engine is pretty accurate, and 
displays perfect technical detail documentation, and additionally, (if 
required) can offer related and even off shoot background discussion into a 
particular vulnerability at the time of its disclosure. To say an ntp search 
would come up with 5,000 unrelated results is completely barbaric. I think the 
source to your hatred is with the founder ('n3td3v') rather than the group its 
self which offers a great resource to anyone in the security field. Of course, 
if you can provide conclusive evidence to the contrary, do get in touch with 
the list, providing indepth audit information relating to your claim.

Valdis.Kletnieks@xxxxxx wrote:     On Wed, 08 Mar 2006 05:46:03 PST, System 
Outage said:

> Why would someone buy a security vulnerability database company? Theres
> already free security vulnerability databases out there. Try this one I
> recently found, you can search for anything you want http://groups.google.com/
> group/n3td3v and its free.

Geez. Somebody hand me a sharp wooden stake, a good mallet, and some garlic
and holy water just in case... ;)

I'm sure you can *search* for anything you want there. The value of a database
is, however, directly related to its ability to return useful information.

5,000 postings that all say "wow leet hole in ntp a few years ago" is worth
nowhere near as much as one detailed technical posting of how that exploit
leveraged a one-byte buffer overrun into a complete rooting of the box....


    
---------------------------------
  Brings words and photos together (easily) with
PhotoMail - it's free and works with Yahoo! Mail.     
---------------------------------
    
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

                
---------------------------------
Yahoo! Mail
Bring photos to life! New PhotoMail  makes sharing a breeze.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/