In message <9405101323.AA11070@rwing.UUCP> rwing!pat@ole.cdac.com (Pat Myrto) writes: > Its a good example of Security Thru Obscurity being alive and well. > > INTERNET SECURITY SCANNER 2.0 > > ISS 2.0 will not be distributed to the public directly because > I take it that this means its a binary distribution only? > Yeh, right. In other words, if one is not a net.legend, working for > CERT, knows a lot of the 'right' people, or running some site that is > on the Fortune 500, etc, one is out of luck. But sooner or later, the > cracker crowd will get a copy if its any good. Pat did not consider or include the following from the ISS announcement: > For 45 Days, Beginning May 1st, there is a Special Introductory Price: > For more information about features and price, please e-mail > iss@shadow.net or cklaus@shadow.net > [ ... ] > To help pay for the expenses of development of this product, there is a > fee. To get an old version, there is a copy for ftp at aql.gatech.edu. Just because the package is not free, does not mean that it is not available to everyone; cklaus is entitled to some remuneration for his work. Most good things in life are not free. - Does the discussion of the price of security products, or computers, belong on bugtraq? Paul Szabo - System Manager // School of Mathematics and Statistics szabo_p@maths.su.oz.au // University of Sydney, NSW 2006, Australia