Re: [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-06 Thread Andrew D Kirch
On 6/6/2012 6:08 PM, valdis.kletni...@vt.edu wrote:

 You're a little bit confused here.  It doesn't matter what people think. It
 matters what the people with more rifles, mortars, tanks, and ammo than you
 think.

 Unless you come up with a way to level the playing field.
I think you just identified it.  buy rifles (I have, there's a Colt M4 
Law Enforcement Carbine sitting next to me), but mortars (a bit 
difficult but not impossible to get) buy tanks (quite easy to get if you 
know where to look), and buy ammo.  DEMAND that federal firearms laws be 
revised, and specifically repeals of 18 USC 921-922.  Yet again I point 
out your VT.edu e-mail and your refusal to listen to Jefferson's 
warnings.  The man wrote your state constitution.  He wasn't kidding 
when he did it.

Andrew

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Megaupload Anonymous hacker retaliation, nobody wins

2012-01-25 Thread Andrew D Kirch
Douchebags are all the same everywhere, even if you aren't Andrew 
Wallace, this does not make you not a douchebag.

Sorry.

Good luck with your packets!

Andrew




On 1/25/2012 4:24 PM, xD 0x41 wrote:
 stfu idiot.
 they can do wtf they want, think about that!
 now, go fuck yaself...and enjoy mailing on FD and secunia is like,
 got smtp problems now ;)
 tc.
 GLOW

 you all thought im some fuckwit called n3td3v ,for this, you all pay!
 I, single fucking handedly, will destroy secunia , and this bs list.
 BELIEVE THAT TO!



 On 26 January 2012 07:53, Levente Peressheri...@sansz.org  wrote:
 On a personal note, maybe OFF...

 I fail to see the gain in such retaliations, especially in organized ones...
 First the Megaupload retaliation, now the UN... and for what... I know
 people want to be heard, but this is plainly sending the wrong message.

 This will give decision makers EXACTLY what they WANT. They coax otherwise
 smart people into acting out violently, thereby creating just the false-flag
 anarchy to prove their point, which is: yes, we need to censor and
 control everything especially the Internet, because see, there's already a
 'war out there at the gates and we need to protect etc. whatever'. We've
 seen it before countless times and this reverse strategy almost always
 works.

 If anyone from the responsible groups are reading this, please know that
 I'm not against the point that you are trying to make... You are all learned
 and knowledgable people, otherwise you wouldn't have been able to pull this
 complicated scheme off... but I implore you to reconsider such outbursts in
 the future for the sake of the very thing that you are trying to protect...
 What's done is done, but let's not give these goons one more reason to take
 away freedom even more so... Please. Just consider this. That's all I'm
 asking... And I guess that's all I wanted to say.

 Levente

 On 01/25/2012 08:20 AM, karma cyberintel wrote:




 (CBS) - The week began on a high note for Internet activist. The biggest
 organized effort to blackout websites in solidarity over the Stop Online
 Piracy Act (SOPA) and Protect IP Act (PIPA) was a huge success

 sources form


 for more details
 http://www.karmacyberintel.net/2012/01/megaupload-anonymous-hacker-retaliation-nobody-wins/


 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/



 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Minimum Syslog Level Needed for Court Trial

2011-12-09 Thread Andrew D Kirch
On 12/9/2011 1:39 PM, phocean wrote:
 Oh boy! I can't believe someone can be insane to the point of writing
 like that.
 Netdev, do you expect that people are going to spend more than 2 secs
 reading it?

 What's wrong with *so many* people on this list?

 Thanks god there is sieve :

 elsif anyof(
  ...
  header :contains From sec...@gmail.com
  ) {
discard;
 }

In Texas they'd have taken N3tD3v out back years ago and shot him as 
unfixably defective.

Andrew

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Contact for reporting Facebook vulnerability

2011-06-11 Thread Andrew D Kirch
On 6/11/2011 2:51 PM, Madhur Ahuja wrote:
 Does anyone know where I can report vulnerabilities in Facebook ?

 Thanks,
 Madhur

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
Right here, simply reply to this e-mail.

Andrew

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Contact for reporting Facebook vulnerability

2011-06-11 Thread Andrew D Kirch
On 6/11/2011 2:51 PM, Madhur Ahuja wrote:
 Does anyone know where I can report vulnerabilities in Facebook ?

 Thanks,
 Madhur

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
err reply list (if reply goes to me I'll forward)

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] Contact for reporting Facebook vulnerability

2011-06-11 Thread Andrew D Kirch
Nah, report it here, bleach the hat later.

On 6/11/2011 3:12 PM, Madhur Ahuja wrote:
 Shouldn't I first report to Facebook at
 http://www.facebook.com/help/contact.php?show_form=white_hat
 ?

 On Sat, Jun 11, 2011 at 3:10 PM, Andrew D Kirchtrel...@trelane.net  wrote:
 On 6/11/2011 2:51 PM, Madhur Ahuja wrote:
 Does anyone know where I can report vulnerabilities in Facebook ?

 Thanks,
 Madhur

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/
 Right here, simply reply to this e-mail.

 Andrew

 ___
 Full-Disclosure - We believe in it.
 Charter: http://lists.grok.org.uk/full-disclosure-charter.html
 Hosted and sponsored by Secunia - http://secunia.com/


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] LulzSec EXPOSED!

2011-06-09 Thread Andrew D Kirch
A back door with s***ty code

On 6/9/2011 4:43 AM, McGhee, Eddie wrote:
 Lol wtf is a bugdoor hahaha

 -Original Message-
 From: full-disclosure-boun...@lists.grok.org.uk 
 [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of Jen Savage
 Sent: 07 June 2011 00:09
 To: full-disclosure@lists.grok.org.uk
 Subject: Re: [Full-disclosure] LulzSec EXPOSED!

 ooo ooo speculation time!

 - Hacker creates website that offers free online password management
 - in javascript
 - bugdoors it
 - collects passwords
 - uses passwords

 TL;DR: over 9000 lulz were had

 -Jen

 On Mon, Jun 6, 2011 at 8:26 AM, T Biehntbi...@gmail.com  wrote:
 LOL @
 A timing attack on ssh passwords over the net?

 and

 I think its just a bruteforce.

 -Travis

 On Mon, Jun 6, 2011 at 7:58 AM, Gichuki John Chuksjonia
 chuksjo...@gmail.com  wrote:
 I think its just a bruteforce.




 On 6/6/11, Andreas Bogkandr...@andreas.org  wrote:
 Excerpts from lulzfail's message of Mo Jun 06 08:39:42 +0200 2011:
 Lulzsec == pwnt
 I've seen the log you pasted to pastebin.  Is this:

   * A timing attack on ssh passwords over the net?
   * Fake, to distract us from your real 0day?

 Andreas

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


[Full-disclosure] Freenode's ACTUAL policy on your project

2010-06-25 Thread Andrew D Kirch
It seems that Freenode's policy regarding projects that they host is 
that THEY control who you identify as members of your project.  Also if 
you ask them to cloak someone they don't want to cloak, you will be 
silenced, as seen below.  Incidentally kloeri is a volunteer for the 
Exherbo project referenced below.  Note the timestamps, and the delay 
before I was pointlessly silenced.

== FreeNode-#freenode.log ==
Jun 25 03:29:47 trelanejayne, a decision about _MY_ namespace?
Jun 25 03:30:23 trelanebazhang, I haven't seen that it's 
in-evidence that this user has any bans placed against him
Jun 25 03:30:24 tsimpsontrelane: a cloak decision has nothing to 
do with your namespace
Jun 25 03:30:33 kloeritrelane: stop being so dramatic - it's about 
whether we're going to cloak that user or not, not about your namespace
Jun 25 03:30:35 trelanetsimpson, this is a funtoo/ cloak, not an 
unaffiliated cloak
Jun 25 03:30:43 tsimpsontrelane: it's still a cloak
Jun 25 03:31:00 trelanetsimpson, which takes 10-15 seconds to set?
Jun 25 03:31:18 trelaneI don't see any sort of justification for a 
claim that it requires a massive amount of volunteer resources, however 
I will grant that staff's time is volunteered
Jun 25 03:32:22 HeisSpiterThe discussion has produced any progress 
since it's been started... 30 minutes ago
Jun 25 03:32:23 *BTouch has quit (Quit: i'm)
Jun 25 03:32:29 tsimpsonit's a staff decision if a cloak should be 
set at all, regardless of what type of cloak
Jun 25 03:32:31 HeisSpiterYou should consider giving up for the 
moment trelane
Jun 25 03:32:39 HeisSpiterUntill they give their decision
Jun 25 03:32:48 HeisSpiterYou can't do anything without their 
approval, so...
Jun 25 03:33:17 ProdegoI'm sure there is a good reason trelane
Jun 25 03:35:24 trelaneProdego, a good reason is insufficient in 
this case as what's been said here is that freenode reserves the right 
to meddle in my project, this is somewhat concerning, and clarification 
of such a statement should be immediately forthcoming
Jun 25 03:36:01 HeisSpiter~
Jun 25 03:36:01 ProdegoI'd suggest using your own irc network if 
you want complete control over network functions like userhosts
Jun 25 03:36:19 sauvintrelane, all freenode cloaks are subject to 
freenode staffers' discretion. Get over it.
Jun 25 03:36:36 kloeritrelane: please drop it
Jun 25 03:36:51 trelanesauvin, my problem is that I have _NEVER_ 
seen that documented anywhere
Jun 25 03:36:55 Saul_GoodmanI'd wonder how canonical would feel if 
staffers had issues with some of their members and would not cloak them
Jun 25 03:36:56 Prodegokloeri: that was sort of my fault, apologies
Jun 25 03:36:59 trelaneas requested I will be dropping this and 
addressing it with tomaw tomorrow
Jun 25 03:37:20 trelaneSaul_Goodman, considering the issues 
between exherbo and Gentoo staffers, and the number of exherbo users on 
staff...
Jun 25 03:37:22 jayneSaul_Goodman: it's happened, and they were 
quite accomodating
Jun 25 03:37:26 trelaneI'd think Gentoo Foundation would have more 
concerns
Jun 25 03:39:24 *kloeri sets mode +q #freenode trelan...@*

___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/