Re: [Full-disclosure] ASUS Eee PC rooted out of the box

2008-02-11 Thread Valdis . Kletnieks
On Sat, 09 Feb 2008 21:29:59 GMT, worried security said: the netdev agenda supports reepex. Gonna be a long hard haul to world domination with that reepex dragging along behind you slowing you down... pgpStw4HS2rQ8.pgp Description: PGP signature ___

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Simon Smith
Joey, here's a pic of you that I took on that special day! http://www.movv.com/prvupload/uploads/super_retard_stfu.jpg Paul Schmehl wrote: --On Monday, February 11, 2008 13:10:09 -0500 Joey Mengele [EMAIL PROTECTED] wrote: LOLOLOL. PICS PICS! I wouldn't have thought that his death

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread worried security
On Feb 11, 2008 8:21 PM, Abilash Praveen [EMAIL PROTECTED] wrote: If Justin was good at securities he wouldn't have kept his mother's name as his security question, however I agree with n3td3v. His mother's name was a very loose example of the possibilities, but I don't want to give the bad

[Full-disclosure] ZDI-08-004: Adobe AcrobatReader Javascript for PDF Integer Overflow Vulnerability

2008-02-11 Thread zdi-disclosures
ZDI-08-004: Adobe Acrobat Javascript for PDF Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-004.html February 11, 2008 -- Affected Vendor: Adobe -- Affected Products: Reader 8.1.1 and earlier versions Acrobat 8.1.1 and earlier versions -- TippingPoint(TM) IPS

[Full-disclosure] ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability

2008-02-11 Thread zdi-disclosures
ZDI-08-005: Novell Client NWSPOOL.DLL EnumPrinters Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-005.html February 11, 2008 -- CVE ID: CVE-2008-0639 -- Affected Vendor: Novell -- Affected Products: Novell Netware Client -- TippingPoint(TM) IPS Customer

Re: [Full-disclosure] in Memory of Dude VanWinkle / Justin Plazzo

2008-02-11 Thread Abilash Praveen
You have the same feeling as what I had a couple of years back when my 23 years old friend (only son for his parents and a Microsoft VIP) passed away in his sleep. Everything seems to be a vanity when someone very good and contributing to technology passes away. We all work so hard, and when we

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread Peter Dawson
I can ...but I won't ! WTF is worth the time/$$$ to intrude into abilashpraveen.com eh ?? On Feb 11, 2008 3:46 PM, Abilash Praveen [EMAIL PROTECTED] wrote: Hello experts, I had been talking to our web hosts the other day and they seem to have a lot of unusual brute force attack on the

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread Paul Schmehl
--On Tuesday, February 12, 2008 02:16:02 +0530 Abilash Praveen [EMAIL PROTECTED] wrote: Hello experts, I had been talking to our web hosts the other day and they seem to have a lot of unusual brute force attack on the servers recently. I'm guessing that it could be because of my emails to

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread dudevanwinkle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 STOP TROLLING WE ARE MOURNING YOU TERRORIST On Mon, 11 Feb 2008 15:46:02 -0500 Abilash Praveen [EMAIL PROTECTED] wrote: Hello experts, I had been talking to our web hosts the other day and they seem to have a lot of unusual brute force attack on the

[Full-disclosure] [ GLSA 200802-04 ] Gallery: Multiple vulnerabilities

2008-02-11 Thread Pierre-Yves Rofes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200802-04 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread Abilash Praveen
Hello experts, I had been talking to our web hosts the other day and they seem to have a lot of unusual brute force attack on the servers recently. I'm guessing that it could be because of my emails to the list? I mean, do you advice on using a personal email for this type of list? Or should I

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Randal T. Rioux
I always think of these pics when those precious snowflakes post nonsense: http://i118.photobucket.com/albums/o100/EMPulse_of_KC/itg_quarterly.jpg http://www.stevelambe.com/posts/Nerd.jpg http://www.encyclopediadramatica.com/images/8/88/Itg.jpg Attention whores, the lot of them. Par for the

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread dudevanwinkle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 LETS JUST DISAGREE TO AGREE ON THIS ONE PLEASE On Mon, 11 Feb 2008 14:51:05 -0500 Geoffrey Gowey [EMAIL PROTECTED] wrote: I can't even believe some of the people on this list would take this posting as a joke. This could have been any of us.

[Full-disclosure] DEATH OF AN INTERNET ROCKSTAR

2008-02-11 Thread dudevanwinkle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 DOES ANYONE KNOW WHAT METHOD THE BITCH USED TO OFF HIMSELF -BEGIN PGP SIGNATURE- Note: This signature can be verified at https://www.hushtools.com/verify Charset: UTF8 Version: Hush 2.5

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Ronald MacDonald
On 11/02/2008, Jonathan Glass [EMAIL PROTECTED] wrote: http://www.timesreporter.com/index.php?ID=79446r=6Category=7 Additionally: http://www.legacy.com/Atlanta/Obituaries.asp?Page=LifeStoryPersonId=102891429 -- Ronald MacDonald ___ Full-Disclosure

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Joey Mengele
LOLOLOLOL. J On Mon, 11 Feb 2008 13:18:21 -0500 Simon Smith [EMAIL PROTECTED] wrote: Hey Joey, he was a prick but christ man, lay off, he is dead! Joey Mengele wrote: LOLOLOL. PICS PICS! J On Mon, 11 Feb 2008 10:40:33 -0500 Jonathan Glass [EMAIL PROTECTED] wrote:

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Keith Kilroy
Agreed, who would have even considered the post to be a joke or even funny at all! On Feb 11, 2008, at 1:43 PM, Simon Smith wrote: Amen! Paul Schmehl wrote: --On Monday, February 11, 2008 13:10:09 -0500 Joey Mengele [EMAIL PROTECTED] wrote: LOLOLOL. PICS PICS! I wouldn't have thought

[Full-disclosure] [SECURITY] [DSA 1494-1] New linux-2.6 packages fix privilege escalation

2008-02-11 Thread Florian Weimer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA-1494-1[EMAIL PROTECTED] http://www.debian.org/security/ Florian Weimer February 11, 2008

[Full-disclosure] [ GLSA 200802-03 ] Horde IMP: Security bypass

2008-02-11 Thread Pierre-Yves Rofes
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200802-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread dudevanwinkle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 THIS IS NO TIME FOR YOU'RE SILLY JOKES On Mon, 11 Feb 2008 16:32:12 -0500 Paul Schmehl [EMAIL PROTECTED] wrote: --On Tuesday, February 12, 2008 02:16:02 +0530 Abilash Praveen [EMAIL PROTECTED] wrote: Hello experts, I had been talking to our web

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread Valdis . Kletnieks
On Mon, 11 Feb 2008 16:57:40 EST, Peter Dawson said: WTF is worth the time/$$$ to intrude into abilashpraveen.com eh ?? If you're a black hat, it's often worth a *LOT* to see your actual high-value target say: WTF is abilashpraveen.com and how come they just hacked us? Remember - an

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Geoffrey Gowey
Another article. http://antivirus.about.com/b/2008/02/11/rip-dude.htm ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread dudevanwinkle
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 VERIFIED TO WORK AGAINST THE LATEST FIREFOX On Mon, 11 Feb 2008 15:36:35 -0500 worried security [EMAIL PROTECTED] wrote: On Feb 11, 2008 8:21 PM, Abilash Praveen [EMAIL PROTECTED] wrote: If Justin was good at securities he wouldn't have kept his

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Abilash Praveen
If Justin was good at securities he wouldn't have kept his mother's name as his security question, however I agree with n3td3v. On 2/12/08, worried security [EMAIL PROTECTED] wrote: On Feb 11, 2008 3:40 PM, Jonathan Glass [EMAIL PROTECTED] wrote:

[Full-disclosure] [ MDVSA-2008:043 ] - Updated kernel packages fix multiple vulnerabilities and bugs

2008-02-11 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:043 http://www.mandriva.com/security/

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread worried security
On Feb 11, 2008 3:40 PM, Jonathan Glass [EMAIL PROTECTED] wrote: http://www.timesreporter.com/index.php?ID=79446r=6Category=7 Justin Marcus Polazzo, 31, of Atlanta, Ga., was found dead in his home on Feb. 4, 2008. He was born in Alma, Mich., on Dec. 31, 1976. At the time of his death,

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Geoffrey Gowey
I can't even believe some of the people on this list would take this posting as a joke. This could have been any of us. Disagreeing about a persons opinion and discussing is part of being on this list, but it's something else entirely when, solely based on what they voiced on a professional

[Full-disclosure] Format string and buffer-overflow in Lst Network Print Server 9.4.2 build 105

2008-02-11 Thread Luigi Auriemma
### Luigi Auriemma Application: Larson Software Technology Network Print Server http://www.cgmlarson.com/products/NetworkPrintServer.php Versions: = 9.4.2 build 105 Platforms:

Re: [Full-disclosure] RIP Dude VanWinkle

2008-02-11 Thread Kristian Erik Hermansen
This news saddens me greatly. Justin and I had plans to meet up at SPICON in Atlanta just a few months ago, but he bailed out and never came down. Was he a bit shy of social gatherings? I told him that a group of us would be getting dinner and drinks, but I never heard back from him. He

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread Peter Dawson
Ok yeah I hear u on the jump points vectors. Makes sense ! On Feb 11, 2008 5:10 PM, [EMAIL PROTECTED] wrote: On Mon, 11 Feb 2008 16:57:40 EST, Peter Dawson said: WTF is worth the time/$$$ to intrude into abilashpraveen.com eh ?? If you're a black hat, it's often worth a *LOT* to see your

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Andrew A
Some dumb faggot suiciding appears more of a net social benefit than a tragedy. On Feb 11, 2008 10:41 AM, Paul Schmehl [EMAIL PROTECTED] wrote: --On Monday, February 11, 2008 13:10:09 -0500 Joey Mengele [EMAIL PROTECTED] wrote: LOLOLOL. PICS PICS! I wouldn't have thought that his death

[Full-disclosure] in Memory of Dude VanWinkle / Justin Plazzo

2008-02-11 Thread Gadi Evron
I was just woken up with the news of Justin's death and am unsure what to think or how to respond--I need to. I feel things are left unfinished, a light just disappeared without warning, and all I can think of is what I said to him, when and where. Was I nice? Was I respectful? Did I always

Re: [Full-disclosure] Brute force attack - need your advice

2008-02-11 Thread Tonnerre Lombard
Salut, Abilash, On Tue, 12 Feb 2008 02:16:02 +0530, Abilash Praveen wrote: I had been talking to our web hosts the other day and they seem to have a lot of unusual brute force attack on the servers recently. I'm guessing that it could be because of my emails to the list? I mean, do you advice

Re: [Full-disclosure] [inbox] in Memory of Dude VanWinkle / Justin Plazzo

2008-02-11 Thread Exibar
It truly is a sad day today that JP died. I know some people didn't like his postings, but that doesn't really matter. It's truly sad when one of our own dies unexpectedly like this, truly sad. Does anyone have any news as to how this tragedy happened? He surely will be missed, he always

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Paul Schmehl
--On Monday, February 11, 2008 13:10:09 -0500 Joey Mengele [EMAIL PROTECTED] wrote: LOLOLOL. PICS PICS! I wouldn't have thought that his death would be a laughing matter. Considering he was only 31, it's rather tragic. (And no, the original post was not a joke, and yes, he really did

[Full-disclosure] Format string and DoS in Opium OPI and cyanPrintIP servers 4.10.x

2008-02-11 Thread Luigi Auriemma
### Luigi Auriemma Applications: Opium OPI Server http://www.cyansoftware.com/Opium_OPI.htm cyanPrintIP Easy OPI

[Full-disclosure] Multiple vulnerabilities in EztremeZ-IP File and Printer Server 5.1.2x15

2008-02-11 Thread Luigi Auriemma
### Luigi Auriemma Application: EztremeZ-IP File and Printer Server http://www.grouplogic.com/products/extreme/overview.cfm Versions: = 5.1.2x15 Platforms:Windows Bugs:

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Joey Mengele
LOLOLOL. PICS PICS! J On Mon, 11 Feb 2008 10:40:33 -0500 Jonathan Glass [EMAIL PROTECTED] wrote: http://www.timesreporter.com/index.php?ID=79446r=6Category=7 Justin Marcus Polazzo, 31, of Atlanta, Ga., was found dead in his home on Feb. 4, 2008. He was born in Alma, Mich., on Dec. 31, 1976.

Re: [Full-disclosure] in Memory of Dude VanWinkle / Justin Plazzo

2008-02-11 Thread scott
He will definitely be missed. Especially his witty siglines. RIP Dude! Regards, Scott Abilash Praveen wrote: You have the same feeling as what I had a couple of years back when my 23 years old friend (only son for his parents and a Microsoft VIP) passed away in his sleep. Everything seems

[Full-disclosure] CSA-L03: Linux kernel vmsplice unchecked user-pointer dereference

2008-02-11 Thread Wojciech Purczynski
===[ ABSTRACT ]= A new vmsplice() system call was introduced in the 2.6.17 release of the Linux kernel. In the 2.6.23 kernel the system call functionality has been further extended resulting in two new critical vulnerabilities. ===[

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Nick FitzGerald
Andrew A wrote: Some dumb faggot suiciding ... Yet you're still posting? ... appears more of a net social benefit than a tragedy. We're waiting... Regards, Nick FitzGerald ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] in Memory of Dude VanWinkle / Justin Plazzo

2008-02-11 Thread Andrew A
oh look, the full disclosure demagogue parade is here to feign sympathy for a fellow useless IT drone who also never found employment in the information security industry i wish gadi evron didn't have a big jew trustfund so he could realize his life isn't worth living and suicide too On Feb 11,

[Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Jonathan Glass
http://www.timesreporter.com/index.php?ID=79446r=6Category=7 Justin Marcus Polazzo, 31, of Atlanta, Ga., was found dead in his home on Feb. 4, 2008. He was born in Alma, Mich., on Dec. 31, 1976. At the time of his death, Justin was employed at the Georgia Institute of Technology's Office of

Re: [Full-disclosure] in Memory of Dude VanWinkle / Justin Plazzo

2008-02-11 Thread Jared DeMott
We all work so hard, and when we die - we have nothing to take with us. None of the praises are going to help Justin or his family now. He is missed and missed forever! I fear eternal life now. Reminds me of 911 in a way. People get so caught up in this Matrix like life ... we

Re: [Full-disclosure] [inbox] in Memory of Dude VanWinkle / JustinPlazzo

2008-02-11 Thread Richard Golodner
On Feb 11th Exibar said: It truly is a sad day today that JP died. I know some people didn't like his postings, but that doesn't really matter. It's truly sad when one of our own dies unexpectedly like this, truly sad. Does anyone have any news as to how this tragedy happened?

Re: [Full-disclosure] Dude VanWinkle's Death

2008-02-11 Thread Simon Smith
Joey, For a retard your quasi email forging skills are impressive. You're l33t even! Joey Mengele wrote: LOLOLOLOL. J On Mon, 11 Feb 2008 13:18:21 -0500 Simon Smith [EMAIL PROTECTED] wrote: Hey Joey, he was a prick but christ man, lay off, he is dead! Joey Mengele wrote:

[Full-disclosure] Directory traversal in SafeNet Sentinel Protection and Key Server 7.4.1.0

2008-02-11 Thread Luigi Auriemma
### Luigi Auriemma Application: SafeNet Sentinel Protection Server SafeNet Sentinel Keys Server http://www.safenet-inc.com Versions: = 7.4.1.0 (aka