antionline security group

i have no idea if their already is one but i purpose *opnion* that antionline starts alittle group thats task is to find exploits in opensource software ....im sure that their are many hundreds if not thousands of ppl working towards this task but some people dont have the time and i bet that their are ppl here that dont do much with their free time...

now this group doesnt have to be sopnsord by AO but it would be a nice addition......
open source is a very great gift that has been given to us by our hard work and our detication to comouting.....we i believe we should give as much back to the people who make open source apps as possiable...for these people probably do not have the intent to make money for information that may be free.....

sorry if my plans are kind of sketchy but over all this is my purposed plan....


a group of ppl here work in their spare time wether it be an hour after school or when u get home from work...or the ppl who do nothing at work....exploits are an ever growing concern in the internet community.....maby you could have a new rank at AO or whatever...

just my thoughts...how about you guys?

You missed an option in your poll:


"I'm either an Idiot or a Moron cuz I cant read the FAQ for ****."

Why do you need to create a new account....Gee I wonder what dumbass member u were before getting banned.

Quote:

---

I'm either an Idiot or a Moron cuz I cant read the FAQ for ****.

---

Umm... he's talking about legit exploitation. Finding bugs and exploits is a very important function, and one of the reasons why the opensource community has (for the most part) produced fairly secure programs. I don't think that the idea is a bad one, but personally, I don't think it would work. For one thing, IMHO not many people here have the skill to pull something like that off. Sure there are a few (no names, don't want to leave anyone out), but most of us (including me) couldn't find exploits. Most of us understand them, and some of us even understand the code, but finding exploits is a whole different ball game.

Cheers,
cgkanchi

Ok. Maybe I'm missing it but why did he get negs for this? Perhaps he's not eloquant but the idea is interesting (albeit rather broad in musing -- WWA, do you realize how many open source projects exist out there?!).

Indeed, seems feasible to me, not to mention it might help add all the more to AO's professional image. Not a bad idea...

I didn't neg him. Maybe someone didnt like his name?

Looking for exploits? Thousands of people are doing this already...although its an interesting subject, I have a hard time looking at his credibility...4 posts under his belt one of which he flamed someone. I smell fish....maybe when I see more positive contributions by him/her, i'll have a different opinion.

Quote:

---

Indeed, seems feasible to me, not to mention it might help add all the more to AO's professional image. Not a bad idea...

---

Yes and no. It's a double-edge sword IMHO. The DMCA Strikes Again sets a dangerous precedent. Makes me wonder if someone will use it in the OS environment if another creates a patch for a system. So on the one hand being able to provide resources that are often needed by the OS environment is a good thing (the biggest downside has always been a lack of funds for proper testing to meet the standards of various certifications -- I can't remember where it is but I remember that NMap is the only OS security tool to meet standard testing certification standards. I'll try to find it).

But then the question does pop up: how ethical are all our members and those that might be part of this? That is a risk and challenge. Just because someone says they are doesn't make them so. It is the eternal debate of full disclosure (the concept not necessarily the mailing list).

i got negged by gladron for making a post while drunk.......but besides that.....im still learning alot about computers so im not exacly ready to bring much to the table but when ever i get info that deserves to be shared i will.....yea SDK didnt like my name.....o well....im not dangerous.....i just dont care for the govt.....just the govt....but not much i can do


and yea i know their are thousands of ppl doing this but the more the better and i know their are lots of open sources apps but we could conentrate one the bigger ones that more ppl use....and especialy the ones that use the internet.....i.e. GAIM.....and the like...just an example ut being it it can be used to connect 2 ppl on the internet it may have an exploit that is not yet found that can be used unlawfully......

and this could yes help the professional image of AO....and it could also be a very good learning experience for all........just my thoughts......i plan to either be an Admin or a security specialist when i get into the job market.........and the fact that in an anarchist doesnt mean that im gonna over throw the govt....its just a dream i have........

i also no that many ppl here dont have much experience in the exploit category...but now would be a good time to learn.....witht he ever growing software market......more and more crappy programs being created with bugs due to lazy programming *some M$ software included*

Quote:

---

Why do you need to create a new account

---

He's a formerly banned member? Uhh, can I ask who? Just curious.

Oh, and nice idea ;)

well i actualy another name right now......but i think im gonna abandon that one.....hexadecimal.....and my old name was..zeratul i think....been about a year i think....sorry...zeratul is someone else....il have to look....

i probably have formor enemies from flame wars.......but im trying not to do that anmore....was kinda inmature and trying to take this serieous and learn something

I like hexadecimal much better than this one...and with all the all the trolling thats been going around lately...I still have issues with his credibility.

WWA....

Quote:

---

and this could yes help the professional image of AO...

---

That could very easily become a double-edged sword. As MsM said in her post,

Quote:

---

how ethical are all our members and those that might be part of this? That is a risk and challenge. Just because someone says they are doesn't make them so. It is the eternal debate of full disclosure (the concept not necessarily the mailing list).

---

You see her point?

yea i think il keep hexadecimal.....yea it could be bad but good.......this could be a good debate......we should weigh the pros and cons
il get on as hex and show you what all i think

ok this is what i think

Pros:
educational value
give someting back to the opensource community
do our part in stoping crackers
offer our services to other open source programers....maby even get cash from it in the future but that is not the goal or intent.....just a very good plus

Cons:
can teach a potential S.K. how to do even more damage *could be a good thing...more knowlege and less scripts needed*
can be time consuming
might be abandoned due to lack of interest by fellow AO members




it looks like their are more less cons but more serieous cons but i always tend to go with the weaker party....so in my heart i think we should do this.....or something with educational value....but in my mind.....i dont no if it would work how well i thought it would

Please use one account in the future. I've banned the WWA account.

Quote:

---

Originally posted here by MsMittens
Ok. Maybe I'm missing it but why did he get negs for this? Perhaps he's not eloquant but the idea is interesting (albeit rather broad in musing -- WWA, do you realize how many open source projects exist out there?!).

---

I neg him because of is nickname, the fact I could barely read what he said, the fact that a guy with 4 post in AO who want to start a exploit group look more like reserve engering that anything else in my eye.

thanks MsM...i was just gonna PM an admin and ask to do so......and SDK.....look at my post now....i bet that ppl had the same ideas of u when u were at 4.....just relax guy.....we may have a person on here that could be the god of computers but only have 2 posts....u never know about ppl......anyway

and im planning my first tut soon.....still deciding a sub that hasnt been coverd...but most have.....yea im not the best but im learning....i dont no how many more times i have to say it but i will.....as soon as i learn something work sharing i will be more then likely to share it....untill then i will bide my time and take in as much info as possiable to better myself

Much the same here. I've haven't been a net admin for even a year yet, but I'm really getting the hang of things now. Very much still in the early/intermediate learning stages, and I really don't have enough pro knowhow to offer good tuts yet.

As for restoring your rep, just keep posting like you are here and avoid flaming, even if you're flamed first. Sometimes it takes some members a while to lose a grudge, but keep your cool and you'll be in good standing before long. Just keep your posts on-topic, that being the best advice I can give you.

And SDK, we probably shouldn't neg folks for screennames of the sort. I am definately anti-anarchy (is that a double negative?! :D), but his name being anarchist does not violate AO rules as far as I'm aware of, and we really want to reserve our negs for actual violations. Some of us young guns, myself included, are bit anxious to fire away the reds at times.

Eh, but blah blah blah, you guys know what you're doing. So back to the topic at hand... ;) I do see what you're saying about that double-edged sword MsM, it is a bit of an issue I suppose.