Just a brief comment.

"Lamo notified the Times of the vulnerabilities Tuesday through a reporter, and provided them with a list of the open proxies."

Why does this humble servant of all that is good and super “whitehat” hacker involve a reporter before talking to the NY Times? Is he seeking attention? Does he want to have his name published? No, of cause not, he just wants to help. Does anyone believe that this is the case? I really hope that most people see this for what it is, a kid high on media exposure playing around with his browser.

In the space set aside for a description of the contributor's expertise, Lamo wrote, "Computer hacking, national security, communications intelligence."

Does this make him a security expert? Shouldn’t it be more like “leet webhaxor, scrippe, im leet j0”?

Do you think that the security community needs more Lamo’s? Should we embrace this new way of securing the world and just start playing around with all the systems that we can get access to? Let’s all go to the media with all of our findings before telling the system administrators. Let’s make the world secure by violating and abusing the trust that companies put in the security community. Does this make sense?

I hope he gets out before he gets busted, because I really don’t want to see the Free Adrian Lamo banner all over the internet.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/340/10688#10688