Re: [Full-disclosure] agile hacking?

reepex, I know how much I know and I know that you fall into the group of lamers, trolls and all other unfriendly inhabitants (you know who you are) of full-disclosure who are incapable of showing what they know and incapable of producing anything of a value so that they keep doing what they do

[Full-disclosure] [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

Re: [Full-disclosure] agile hacking?

This reads like a troll, all it's missing is the QED after the last sentence. Awesome work PDP. On Tue, Mar 18, 2008 at 6:12 AM, Petko D. Petkov [EMAIL PROTECTED] wrote: reepex, I know how much I know and I know that you fall into the group of lamers, trolls and all other unfriendly

Re: [Full-disclosure] More High Profile Sites IFRAME Injected

On Mon, Mar 17, 2008 at 8:35 PM, [EMAIL PROTECTED] wrote: On Sat, 15 Mar 2008 08:44:29 -, worried security said: i call government involvement... worried if u are a government who wants an attack highly known about do you A) attack some random blog, or b) attack high profile news

[Full-disclosure] [ GLSA 200803-26 ] Adobe Acrobat Reader: Insecure temporary file creation

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-26 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - -

Re: [Full-disclosure] agile hacking?

Just because you call me troll doesn't mean you should ignore my questions. Who is your book aimed towards? You said this will be the ' best hacking reference/manual/book ever made' . Doesn't that mean it should contain lots of low level/kernel level exploitation of which you are incapable?

[Full-disclosure] Agile Hacking

http://www.gnucitizen.org/blog/agile-hacking/ Help us create the best hacking reference/manual/book ever made. We provide the scene, the resources and the money, and you keep the credits and the control over the eventual profits. Read on. During the next couple of months we are open for your

[Full-disclosure] CORE-2008-0123: Leopard Server Remote Path Traversal

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Leopard Server Remote Path Traversal *Advisory Information* Title: Leopard Server Remote Path Traversal Advisory ID: CORE-2008-0123 Advisory URL:

[Full-disclosure] [ MDVSA-2008:067 ] - Updated nagios packages fix multiple vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:067 http://www.mandriva.com/security/

Re: [Full-disclosure] More High Profile Sites IFRAME Injected

On Tue, Mar 18, 2008 at 1:06 AM, [EMAIL PROTECTED] wrote: On Mon, 17 Mar 2008 21:35:03 -, you said: Have you considered the possibility that it's actually the RBN or similar, making it *look* like a government is involved? ah, so you're not denying it does look like a government

[Full-disclosure] iDefense Security Advisory 03.18.08: Multiple Vendor CUPS CGI Heap Overflow Vulnerability

iDefense Security Advisory 03.18.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 18, 2008 I. BACKGROUND The Common UNIX Printing System, more commonly referred to as CUPS, provides a standard printer interface for various Unix based operating systems. For more information, visit

Re: [Full-disclosure] agile hacking?

well, let's see how it goes On Tue, Mar 18, 2008 at 7:19 PM, reepex [EMAIL PROTECTED] wrote: Just because you call me troll doesn't mean you should ignore my questions. Who is your book aimed towards? You said this will be the ' best hacking reference/manual/book ever made' . Doesn't that

[Full-disclosure] [ GLSA 200803-27 ] MoinMoin: Multiple vulnerabilities

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-27 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[Full-disclosure] AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 ++ | Product | Asterisk |

[Full-disclosure] AST-2008-005: HTTP Manager ID is predictable

Asterisk Project Security Advisory - AST-2008-005 ++ | Product| Asterisk|

[Full-disclosure] AST-2008-003: Unauthenticated calls allowed from SIP channel driver

Asterisk Project Security Advisory - AST-2008-003 ++ | Product | Asterisk |

[Full-disclosure] AST-2008-002: Two buffer overflows in RTP Codec Payload Handling

Asterisk Project Security Advisory - AST-2008-002 ++ | Product | Asterisk |

[Full-disclosure] [ MDVSA-2008:068 ] - Updated unzip packages vulnerability

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:068 http://www.mandriva.com/security/

Re: [Full-disclosure] agile hacking?

I see thoth responded negatively to your project and again you assume that if someone bashes you that he/she has no skill and is just trolling. This means you obviously were not as his kiwicon talk or read the slides ( not that you would understand them ) but it shows how arrogant you are. you

Re: [Full-disclosure] agile hacking?

On Tue, Mar 18, 2008 at 10:36 PM, Nate McFeters [EMAIL PROTECTED] wrote: I don't consider myself a 'kiddie' and I've considered contributing to it. I feel like the old adage of blowing out someone elses flame to make yours burn brighter applies here. Reepex, I didn't get a chance to see your

Re: [Full-disclosure] agile hacking?

Ok, I'll buy that, that's reasonable. I wasn't in the exchange with thoth. I guess when I read about a community project to write the ultimate hacking book, I assumed people from all backgrounds of security would be interested in contributing... maybe that's a bit of a Utopian view, but I could

[Full-disclosure] [USN-587-1] Kerberos vulnerabilities

=== Ubuntu Security Notice USN-587-1 March 19, 2008 krb5 vulnerabilities CVE-2008-0062, CVE-2008-0063, CVE-2008-0947 === A security issue affects the following Ubuntu