zero day.... who really gives a shit? a brief history of games.

[eliza <ghooti () googlemail com>]

i cant be bothered to signup to fd and post this there. so i guess it
goes here. and you never know, the possibility of a shitstorm could be
a laugh. where did i put those pdfs....?

i hate the security industry for stealing other peoples words and
changing the meaning to like 900 different things then arguing
incessantly about what they mean.

the term zero day comes from the games cracking scene, dunno if they
stole it from somewhere else,  but it doesnt matter.  you have stolen
their definitions.

  it means that a game is cracked and posted to the local bbs on the
same day it is released to the public. there was a lot of misdirected
pride in going to the shops, buying a game on release date, cracking
it, running a quick magnet over the disk/tape then getting you cash
back, then sharing it with your mates seeing who can design the best
loaders...

I remember robocop3 on the amgia 'hyped as the most uncrackable game
for the time' was  cracked and released before it hit the shops.

so a zero day is always a zero day. it is used as a badge of honour.a
stamp, like XXX

anyway.  this leads us on to two possible definitions of zero day.

the name for an exploit developed and released to the public for a
software application, the day of the applications released. [
(traditional?)

and

an exploit developed and released to the public the day a patch is
released, but the exploit is gotten from reverse engineering the
patch/finding it because of the patch, /not/ being the example that
the patch was created for.

they are not mutually exclusive.

after the information superhighway was given to us, the skilled became
a bit more elitist, because the leeches were arriving enmasse - hence
the label private, it meant you looked cool if you gave it to your
mates.

that is the origin of the word.its not in the dictionary so you can
claim it means anything. but how and when person uses the word should
be a reflection of them and thier skills.

cheers,

eliza.
==
for those that care what people that sit in cinemas with video cameras can do:

the games cracking scene died, the hobbyists left for new challenges.
the criminals moved in.

Films became the new thing, they dropped the term zero day (quality
and size became more important than super quick release speed), and
created 3 sub classifications - cam, screener, telesync.

people that sit in cinemas with video cameras get this concept. why
cant the sec industry? bloody showponies!
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.