Re: [Full-disclosure] Testing DidTheyReadIt.com

2007-10-01 Thread James Matthews
Can we get stats? On 10/1/07, Gautam <[EMAIL PROTECTED]> wrote: > > ditto > > On 10/1/07, Anshuman G <[EMAIL PROTECTED]> wrote: > > > > Me :) and I think lots of people are interested . > > > > Regards, > > Anshu > > > > On 10/2/07, Thierry Zoller <[EMAIL PROTECTED]> wrote: > > > > > > Who is

[Full-disclosure] WifiZoo v1.2 release

2007-10-01 Thread Hernan Ochoa
WifiZoo v1.2: -Bug Fixes -It now has a web GUI running on localhost:8000, it will hopefully make its use more 'convenient' -And it also has an 'http proxy' ala ferret/hamster. You can display the captured cookies with the web gui, clicking on a cookie will set that cookie on the wifizoo proxy. Set

Re: [Full-disclosure] Testing DidTheyReadIt.com

2007-10-01 Thread Gautam
ditto On 10/1/07, Anshuman G <[EMAIL PROTECTED]> wrote: > > Me :) and I think lots of people are interested . > > Regards, > Anshu > > On 10/2/07, Thierry Zoller <[EMAIL PROTECTED]> wrote: > > > > Who is interested in the stats ? > > > > ___ > Full-D

[Full-disclosure] [ MDKSA-2007:192 ] - Updated mplayer packages fix vulnerability

2007-10-01 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2007:192 http://www.mandriva.com/security/ ___

Re: [Full-disclosure] Testing DidTheyReadIt.com

2007-10-01 Thread Anshuman G
Me :) and I think lots of people are interested . Regards, Anshu On 10/2/07, Thierry Zoller <[EMAIL PROTECTED]> wrote: > > Who is interested in the stats ? > ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-

Re: [Full-disclosure] Testing DidTheyReadIt.com

2007-10-01 Thread Thierry Zoller
Dear Nick, Thank you for your insight on this, I think it should be clear to anybody that if you display just text it should be useless, the stats proof you wrong though. - Some poeple like clicking on links even if they are simply displayed. - Some mailing list mirrors do not remove the image

[Full-disclosure] [ MDKSA-2007:191 ] - Updated libsndfile packages fix vulnerability

2007-10-01 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDKSA-2007:191 http://www.mandriva.com/security/ ___

Re: [Full-disclosure] Testing DidTheyReadIt.com

2007-10-01 Thread Dude VanWinkle
On 9/29/07, Morning Wood <[EMAIL PROTECTED]> wrote: > Outlook Express blocks this by default, unless you click > the "show images" dialog thingie Same with gmail -JP ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclos

[Full-disclosure] Immunity Debugger v1.2 Release

2007-10-01 Thread Nicolas Waisman
This release we include a flurry of new exciting features! We are proud to announce the first beta version of our free Vista Heap Library, which supports the new 'Freelist' and Low Fragmentation Chunk. Check out the new usage of the !heap command for more details. Also included in this release

[Full-disclosure] Two buffer-overflow in FSD V2.052 d9 and FSFDT V3.000 d9

2007-10-01 Thread Luigi Auriemma
### Luigi Auriemma Application: FSD http://www.mcdu.com/en/download.php Versions: <= "V2.052 d9" (original FSD) and "V3.000 d9" (FSFDT FSD) Platforms:Windows and *nix Bugs:

[Full-disclosure] Format string in the Doom 3 engine through PB

2007-10-01 Thread Luigi Auriemma
### Luigi Auriemma Application: Doom 3 engine Games:Doom 3 (http://www.doom3.com)<= 1.3.1 Quake 4(http://www.quake4game.com) <= 1.4.2

[Full-disclosure] Format string in F.E.A.R. 1.08 through PB

2007-10-01 Thread Luigi Auriemma
### Luigi Auriemma Application: F.E.A.R. (First Encounter Assault Recon) http://www.whatisfear.com Versions: <= 1.08 Platforms:Windows and Linux Bug: format string Exp

[Full-disclosure] Unexploitable buffer-overflow in America's Army 2.8.2 through PB

2007-10-01 Thread Luigi Auriemma
### Luigi Auriemma Application: America's Army and America's Army Special Forces http://www.americasarmy.com Versions: <= 2.8.2 Platforms:Windows, Linux and Mac Bugs: u

Re: [Full-disclosure] Firefox 2.0.0.7 has a very serious calculation bug

2007-10-01 Thread Valdis . Kletnieks
On Mon, 01 Oct 2007 13:33:20 EDT, wac said: > > > > If I use strcpy() to read user input into a buffer, I am at fault and > > not C compiler. > > > I don't think that's a fair comparison. > If you make the right algorithm and you do not get the expected > results *is* not > your fault but what a

Re: [Full-disclosure] Firefox 2.0.0.7 has a very serious calculation bug

2007-10-01 Thread wac
> > If I use strcpy() to read user input into a buffer, I am at fault and > not C compiler. I don't think that's a fair comparison. If you make the right algorithm and you do not get the expected results *is* not your fault but what are you sitting at (compiler, framework, library ...).

Re: [Full-disclosure] Firefox 2.0.0.7 has a very serious calculation bug

2007-10-01 Thread wac
Hello: On 9/29/07, Andrew Farmer <[EMAIL PROTECTED] > wrote: > > > If your bank is doing financial calculations using Javascript in a > standard web browser, you have bigger things to worry about than > roundoff errors. Ok let's explain this with more details because I realize that you got some

[Full-disclosure] High-Level Reverse Engineering whitepaper

2007-10-01 Thread Andy Davis
This paper aims to present a methodical framework for high-level reverse engineering. The methodology is a culmination of existing tools and techniques within the IT security research community, which presents ways to identify process operation at a higher-level of abstraction than traditional bina

Re: [Full-disclosure] Netscreen 5400

2007-10-01 Thread Brian Toovey
On 10/1/07, Fareeduddin Ahmad <[EMAIL PROTECTED]> wrote: > Hi guys, > > The CPU utilization of our Netscreen 5400 suddenly went up from 5% to 54% - > upto 81%. Now its moving between 33% and 81%. What are all the reasons the > firewall could be doing this ? Policies related to ALG. Brian -- Bri

[Full-disclosure] Netscreen 5400

2007-10-01 Thread Fareeduddin Ahmad
Hi guys, The CPU utilization of our Netscreen 5400 suddenly went up from 5% to 54% - upto 81%. Now its moving between 33% and 81%. What are all the reasons the firewall could be doing this ? Any suggestions? Thanks. Fareed ___ Full-Disclosure - We bel