I believe this discussion is about people who have real skills ( which is why you are confused ).. not "o so I couldn't finish my CS degree or function outside of computers so now I am doing XSS for a living" .... If XSS is the extent of your knowledge then I guess it will get food on your table but I think you should switch to this: http://www.securityfocus.com/archive/105 mailing list.
and btw: needing someone to visit a webpage so you can xsrf isnt exactly military grade 0day nor is it stealthy ( not that you would know anything about stealthy exploits) but i guess people jumped on it so much so that their cissp capable minds wouldn't be confused by sql injection [1]. I also do not know why you assume someone that doesnt consider lame XSS as an 'exploit' could not work professionally. Maybe you just have no skill and thats all your job requires of you? [1] http://seclists.org/dailydave/2007/q4/0016.html On 10/14/07, pdp (architect) <[EMAIL PROTECTED]> wrote: > > I really don't know what you refer to as an exploit.. :) and more > over, it is obvious that you have a lack of knowledge on what's more > valuable nowadays. don't take it personal. > > do you work professionally? > >
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
