[Full-disclosure] [SECURITY] [DSA 1516-1] New dovecot packages fix privilege escalation

2008-03-14 Thread Florian Weimer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- Debian Security Advisory DSA-1516-1[EMAIL PROTECTED] http://www.debian.org/security/ Florian Weimer March 14, 2008 htt

[Full-disclosure] Black Hat Announcements: New CFP system and Japan '08 confirmed

2008-03-14 Thread jmoss
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Full Disclosure, here is a big Black Hat update to keep inquiring minds up to date with all the goings on in our not-so-secret lair: Black Hat Amsterdam is a go! Training: 25-26 March 2008 Briefings: 27-28 March 2008 There will be four different t

Re: [Full-disclosure] Diceware method adoption - brute force me if you dare

2008-03-14 Thread Razi Shaban
Not legalizing, but rather acknowledging its reality. -- razi On 3/13/08, blah <[EMAIL PROTECTED]> wrote: > On Wed, Mar 12, 2008 at 12:15 PM, M. B. Jr. <[EMAIL PROTECTED]> wrote: > > Doesn't adopting the Diceware method in a, say, government corporative > > environment means legalizing brute

Re: [Full-disclosure] Local persistent DoS in Windows XP SP2 Taskmanager

2008-03-14 Thread reepex
While I am sure MS is now trembling at the disclosure of such a high impact bug, I am wondering why you chose core-security.net as your domain when core security (.com) is already known as a leading security company with a good name? On Fri, Mar 14, 2008 at 2:49 PM, SkyOut <[EMAIL PROTECTED]> wro

[Full-disclosure] Local persistent DoS in Windows XP SP2 Taskmanager

2008-03-14 Thread SkyOut
Dear list, after weeks of total ignorance by Microsoft I decided to finally release all information related to a bug, that has to do with the Windows XP SP2 Taskmanager. Manipulating a Registry key makes it possible to disable the Taskmgr. On the next startup it will crash with an error mes

Re: [Full-disclosure] hacking a pacemaker

2008-03-14 Thread Randal T. Rioux
On Wed, March 12, 2008 4:57 am, Gadi Evron wrote: > Almost a year ago I gave a talk at the CCC Camp in Germany I called > "hacking > the bionic man". It even made Wired, in some fashion. > http://blog.wired.com/27bstroke6/2007/08/will-the-bionic.html > http://events.ccc.de/camp/2007/Fahrplan/events

[Full-disclosure] SUSE Security Announcement: evolution (SUSE-SA:2008:014)

2008-03-14 Thread Thomas Biege
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 __ SUSE Security Announcement Package:evolution Announcement ID:SUSE-SA:2008:014 Date: