[Full-disclosure] RealPlayer 0-day exploit was found in malicious

2007-11-10 Thread lzscg
Most vendors reported that RealPlayer 0-day exploit was found in malicious .html files, such as Symantec, Mcafee Avert Labs, etc. The issue affects an ActiveX object in the RealPlayer component ierpplug.dll. RealPlayer 11 Beta, 10.5, and older versions are affected. Symantec and Mcafee

[Full-disclosure] A friend wants to Share Favorites with you

2007-11-10 Thread gautam . singh
StumbleUpon Discover new web sites Er333 wants to Share his Favorites with you He likes1 page He has1 fan Connect with people that like the same sites you do on StumbleUpon. Come check out StumbleUpon - it's really cool! -er333 [EMAIL PROTECTED] Connect with me

[Full-disclosure] Standing Up Against German Laws - Project HayNeedle

2007-11-10 Thread Paul Sebastian Ziegler
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Dear Infosec community, as most of you may have heard the German government passed a law today that will lead to all connections being logged for 6 months. This includes phone calls as well as all internet connections. This is madness for various

Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle

2007-11-10 Thread Nico Golde
Hi Paul, * Paul Sebastian Ziegler [EMAIL PROTECTED] [2007-11-10 18:33]: as most of you may have heard the German government passed a law today that will lead to all connections being logged for 6 months. This includes phone calls as well as all internet connections. [...] The mechanism is

Re: [Full-disclosure] Standing Up Against German Laws - ProjectHayNeedle

2007-11-10 Thread nate . mcfeters
Paul, Sorry about your difficulties. This is complete madness on the part of the German government and I fear it sets a dangerous precedent for other governments. There is no more clear definition for the word ironic then when those we've elected to protect us and our civil liberties pass

Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle

2007-11-10 Thread Paul Sebastian Ziegler
How would this help with stored phone calls? How would this help with the general problem? You are right to notice: It doesn't help with the calls at all. While I think it is nice that you think about doing something against this I don't really like your idea since you totally miss that

[Full-disclosure] 300$ is more than 0$

2007-11-10 Thread don bailey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ok, so the first person to disclose a Linux kernel zero day exploit in the next week will get 300$ from me direct into their favorite (legitimate) charity's bank account. Ok, fuck it, let's make it 500$. I'm serious. Ok, fuck it again. ANY kernel

Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle

2007-11-10 Thread LT
Dear Paul, as most of you may have heard the German government passed a law today that will lead to all connections being logged for 6 months. This includes phone calls as well as all internet connections. I'm also from Germany, but I do not agree with your understanding of the new law.

Re: [Full-disclosure] Exploit Brokering

2007-11-10 Thread don bailey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 As far as I'm concerned this whole discussion is moot. The fact is, SNOsoft can get snowed just as easy as any other company. Nothing makes them magical and intelligent enough not to get snowed and they can end up fucking over the U.S.A. However,

Re: [Full-disclosure] 300$ is more than 0$

2007-11-10 Thread reepex
does badly recorded videos on random OSes like plan9 count? On Nov 10, 2007 3:49 PM, don bailey [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ok, so the first person to disclose a Linux kernel zero day exploit in the next week will get 300$ from me direct into

[Full-disclosure] Wiretapping

2007-11-10 Thread Kelly Robinson
I just finished reading a book Corporate Computer and Network Security - Raymond R. Panko. He states that the CSI/FBI surveys suggest that wiretapping is rare. Should companies still be concerned with Wiretapping? ___ Full-Disclosure - We believe in it.

Re: [Full-disclosure] Standing Up Against German Laws - Project HayNeedle

2007-11-10 Thread Paul Sebastian Ziegler
I'm also from Germany, but I do not agree with your understanding of the new law. I share your understanding. And I must agree that my formulations regarding this should have been more clear. In the blog-entry it says This includes assigned IP addresses as well as telephone calls. And no,

Re: [Full-disclosure] 300$ is more than 0$

2007-11-10 Thread crazy frog crazy frog
why some one will think of selling it for 500$? On Nov 11, 2007 3:19 AM, don bailey [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ok, so the first person to disclose a Linux kernel zero day exploit in the next week will get 300$ from me direct into their favorite

Re: [Full-disclosure] Wiretapping

2007-11-10 Thread crazy frog crazy frog
yes why not?afterall they can do anything. On Nov 11, 2007 7:17 AM, Kelly Robinson [EMAIL PROTECTED] wrote: I just finished reading a book Corporate Computer and Network Security - Raymond R. Panko. He states that the CSI/FBI surveys suggest that wiretapping is rare. Should companies still