Re: [Full-disclosure] Free Iraq..

2008-03-27 Thread Rankin, James R
So is the UK, it is being invaded by half of Europe, Asia and the Middle East -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of n3td3v Sent: 26 March 2008 15:55 To: full-disclosure@lists.grok.org.uk Subject: [Full-disclosure] Free Iraq.. On Wed, Mar 26, 200

[Full-disclosure] [SECURITY] [DSA 1529-1] New Firebird packages fix several vulnerabilities

2008-03-27 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-1529-1 [EMAIL PROTECTED] http://www.debian.org/security/ Moritz Muehlenhoff March 24, 2008

[Full-disclosure] The reason why "Pangolin is backdoor"

2008-03-27 Thread zwell.nosec
Pangolin really is a backdoor? Let's do this step to make sure: 1.Download UPX from upx.sf.net 2.In cmd shell, run "upx.exe -d pangolin.exe" 3.Upload the new pangolin.exe(actually the origin) to virustotal 4.Check the result again I do these, and the result is: http://www.virustotal.com/anali

Re: [Full-disclosure] The reason why "Pangolin is backdoor"

2008-03-27 Thread Razi Shaban
Wow! Cryptors prevent viruses from being detected? Who would have thought! -- Razi On 3/27/08, zwell.nosec <[EMAIL PROTECTED]> wrote: > Pangolin really is a backdoor? Let's do this step to make sure: > 1.Download UPX from upx.sf.net > 2.In cmd shell, run "upx.exe -d pangolin.exe" > 3.Upload

[Full-disclosure] 答复: [Full-disclosure] The reason why "Pangolin is backdoor"

2008-03-27 Thread zwell.nosec
Just do it yourself pls, using the "backdoored" pangolin.exe you think and decompress it, then upload to virustotal, I did not change any bits ;) -邮件原件- 发件人: Razi Shaban [mailto:[EMAIL PROTECTED] 发送时间: 2008年3月27日 14:32 收件人: zwell.nosec 抄送: full-disclosure@lists.grok.org.uk; [EMAIL PROTECT

[Full-disclosure] Re: [Full-disclosure] 答复: [Full-disclosu re] The reason why "Pangolin is backdoor"

2008-03-27 Thread Russ McRee
Right, and what about all the other crapware on your "resourceful" site? 2008/3/27 zwell.nosec <[EMAIL PROTECTED]>: > Just do it yourself pls, using the "backdoored" pangolin.exe you think and > decompress it, then upload to virustotal, I did not change any bits ;) > > -邮件原件- > 发件人: Razi

Re: [Full-disclosure] The reason why "Pangolin is backdoor"

2008-03-27 Thread zwell.nosec
All right, the language is a big problem ;( First, about pdf_poc.pdf, sure it is, click here, it is just a POC : http://www.nosec.org/web/index.php?q=node/63 And about zps.exe, pls click here, it is a port scanner, a 8k tool you guys think it is a backdoor? Come on : http://www.nosec.org/web/ind

[Full-disclosure] Re: 答复: [Full-disclosure] The r eason why "Pangolin is backdoor"

2008-03-27 Thread Razi Shaban
I have enough experience with UPX to know that it's a fairly good packer. If you placed the backdoor into the code yourself, I'm not surprised that the packed version is UD by most virus-scanner. Doesn't make it any less of a backdoor. -- Razi On 3/27/08, zwell.nosec <[EMAIL PROTECTED]> wrote:

[Full-disclosure] 答复: 答复: [Full-disclosure] The reason why "Pangolin is backdoor"

2008-03-27 Thread zwell.nosec
Oh, Really? So you can compress using UPX again, then upload to virustotal. Check it out, ;) Thanks -邮件原件- 发件人: Razi Shaban [mailto:[EMAIL PROTECTED] 发送时间: 2008年3月27日 14:54 收件人: zwell.nosec 抄送: full-disclosure@lists.grok.org.uk; [EMAIL PROTECTED] 主题: Re: 答复: [Full-disclosure] The reason w

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Garrett M. Groff
Excellent points, with exception to the gratuitious name-calling (just b/c there are annoying people on this list who throw out invective doesn't mean we should submit to our temptation to do the same vile practice back to them). I'll add the following (despite the fact that it's grossly off-to

Re: [Full-disclosure] Free Iraq..

2008-03-27 Thread Garrett M. Groff
Legal immigration is voluntary, not an "invasion." Further, countries that are able to absorb immigration (like the United States) have benefited in the aggregate economic sense. Contrast that with France. France has had some level of success with immigrants... but not much. The car burnings an

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Handrix
Great post, but I'm afraid to tell you that the truth is out of you're answear... you're answer is a classical one that we found in the most of fashion's magazine . The truth is in the bloody Iraq across americans army, and others. We hope that Iraq will be free very soon 'cause their children need

[Full-disclosure] the hysteria on pangolin.exe

2008-03-27 Thread LIUDIEYU dot COM
unpack it with upx and all the false positives are gone, exactly as zwell noted. antivirus is never accurate. 6326120a66269f8f42aa91b76c8c237c pangolin.exe dea13ad95c43c04165acc53bf7eedfa6 pangolin.exe.upx-d 6326120a66269f8f42aa91b76c8c237c http://www.virustotal.com/analisis/0603d534b0128bf81ec5

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread I. D.
Not everyone views the defunct UN as a legitimate authority on what is right or wrong. Occupation is occupation. I'm no friend of Islam, but I can call a spade a spade. On Thu, Mar 27, 2008 at 11:08 AM, Handrix <[EMAIL PROTECTED]> wrote: > Great post, but I'm afraid to tell you that the truth is

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Razi Shaban
Who mentioned the UN? -- Razi On 3/27/08, I. D. <[EMAIL PROTECTED]> wrote: > Not everyone views the defunct UN as a legitimate authority on what is right > or wrong. Occupation is occupation. I'm no friend of Islam, but I can call a > spade a spade. > > On Thu, Mar 27, 2008 at 11:08 AM, Handrix

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread josh
The second post? Their weapon inspectors? Sent from my BlackBerry® smartphone with SprintSpeed -Original Message- From: "Razi Shaban" <[EMAIL PROTECTED]> Date: Thu, 27 Mar 2008 17:44:26 To:"I. D." <[EMAIL PROTECTED]> Cc:full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Fre

Re: [Full-disclosure] Free Iraq..

2008-03-27 Thread Rankin, James R
Voluntary? No-one had a referendum and asked the British people if they wanted wave after wave of foreign invaders committimg crimes, pinching employment and throwing hissy fits every time that British law doesn't fit with their own ideas. -Original Message- From: Garrett M. Groff [mailto

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Razi Shaban
Touche. Now a question. Is the USA a member of the UN? Okay. And was Iraq a member of the UN? Okay. So both nations agreed to subject themselves to the UN mandate, which implies recognition. In order for the UN to effectively work, the participation of all nations is a must. When you have rogue n

Re: [Full-disclosure] Free Iraq..

2008-03-27 Thread Razi Shaban
At the risk of opening myself up to Godwin's law, blaming crime and unemployment on foreign immigrants very strongly represents policies that a certain historical enemy of Britain championed. -- Razi On 3/27/08, Rankin, James R <[EMAIL PROTECTED]> wrote: > Voluntary? No-one had a referendum and

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Peter Dawson
so much for being the friggin US of A !! http://tpmmuckraker.talkingpointsmemo.com/2008/03/todays_must_read_304.php ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - h

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Razi Shaban
I'm sorry, but I think you misunderstood part of my post. What I meant was that the USA is a rogue nation, just like other so-called "rogue nations," and is causing the UN to lose its effectiveness. I don't doubt that what the USA has done to Cuba is pointless, ineffective, and strategically wrong

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Garrett M. Groff
A thoughtful reply was posed to my address rather than the list. I'll keep the sender anonymous & post my reply since others have posed similar concerns: Excellent point. Initially, a "puppet regime" would be in place to run the country on a day to day basis. Actually, I'm more concerned about

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Paul Schmehl
--On Thursday, March 27, 2008 12:24:10 -0400 Peter Dawson <[EMAIL PROTECTED]> wrote: > so much for being the friggin US of A !! > > http://tpmmuckraker.talkingpointsmemo.com/2008/03/todays_must_read_304.php > > If you think there's one thing remarkable about that story, then you must have your

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread news
Sorry, but am I the only one missing the infosec security angle on the "free tibet" and "free iraq" posts? Renski > I'm sorry, but I think you misunderstood part of my post. > What I meant was that the USA is a rogue nation, just like other > so-called "rogue nations," and is causing the UN to lo

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Garrett M. Groff
Not commenting on the perceived misunderstanding, but I'll post a couple thoughts... One, I disagree with the "rogueness" of the US (beyond that, the debate is semantics, methinks). Having said that, I'm not particularly fond of the current administration and I hope the next president expresses

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread davidrook
You are certainly not alone! [EMAIL PROTECTED] wrote: > Sorry, but am I the only one missing the infosec security angle on the > "free tibet" and "free iraq" posts? > > Renski > > >> I'm sorry, but I think you misunderstood part of my post. >> What I meant was that the USA is a rogue nation, ju

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread infolookup
Free Kevin, opsss he is free already, but at least that sounds a bit infosec. Sent from my Verizon Wireless BlackBerry -Original Message- From: [EMAIL PROTECTED] Date: Thu, 27 Mar 2008 17:05:18 To:full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Free Iraq Sorry, but am

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Garrett M. Groff
Your concern in our off-topicness is indeed justified. We have strayed far from the primary topic of the list. - G - Original Message - From: <[EMAIL PROTECTED]> To: Sent: Thursday, March 27, 2008 1:05 PM Subject: Re: [Full-disclosure] Free Iraq Sorry, but am I the only one missing

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Razi Shaban
On 3/27/08, Garrett M. Groff <[EMAIL PROTECTED]> wrote: > A thoughtful reply was posed to my address rather than the list. I'll keep > the sender anonymous & post my reply since others have posed similar > concerns: :-) > Excellent point. Initially, a "puppet regime" would be in place to run th

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Garrett M. Groff
Tempting to give a soap-box response, I'll attempt to give this thread a graceful exit by saying that I believe the strategic course I've described previously is do-able and a welcomed evolution of the US "maintain the superpower status quo" vision that so many in power have. The obstacles ment

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Valdis . Kletnieks
On Thu, 27 Mar 2008 12:03:15 CDT, Paul Schmehl said: > your head in the sand. The Pentagon has been paying $900.00 for toilet seats Of course, understanding what a "toilet seat" actually *was* might help. "The $640 toilet seat was, in fact, a large molded plastic cover for the entire toilet syst

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread M . B . Jr .
Throwaway1, there is absolutely no sense in evoking 1990's UN-authorized action to justify 2003's UN's-Security-Council-unauthorized-and-illegal invasion. Your childish reasoning is no more than a poor attempt of sophistic argumentation. Yours sincerely, On 3/26/08, [EMAIL PROTECTED] <[EMAIL

Re: [Full-disclosure] Free Tibet, free Iraq, free whatever ...

2008-03-27 Thread security concern
Sorry to inject some real truth here, guys. > > 1. Tibet. > According to Patrick French, a former director of 'Free Tibet Campaign' in > London, there is no evidence in Dharamsala about the '1.2 million Tibetan > genocide'. (See his Op-Ed piece in the New York Times, March 22, 2008.) > > 2. Iraq.

Re: [Full-disclosure] Free Tibet, free Iraq, free whatever ...

2008-03-27 Thread josh
No please don't continue this coversation. I've seen enough. Sent from my BlackBerry® smartphone with SprintSpeed -Original Message- From: "security concern" <[EMAIL PROTECTED]> Date: Thu, 27 Mar 2008 15:08:19 To:full-disclosure@lists.grok.org.uk Subject: Re: [Full-disclosure] Free Tibe

[Full-disclosure] [SECURITY] [DSA 1532-1] New xulrunner packages fix several vulnerabilities

2008-03-27 Thread Moritz Muehlenhoff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-1532-1 [EMAIL PROTECTED] http://www.debian.org/security/ Moritz Muehlenhoff March 27, 2008

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread n3td3v
On Thu, Mar 27, 2008 at 6:56 PM, M. B. Jr. <[EMAIL PROTECTED]> wrote: > Throwaway1, > > Your childish reasoning is no more than a poor attempt of sophistic > argumentation. He tried to overthrow the n3td3v agenda and failed miserbly. Iraq war strategic disaster THE IRAQ WAR is five years old

[Full-disclosure] [ MDVSA-2008:079 ] - Updated sarg packages fix multiple vulnerabilities

2008-03-27 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:079 http://www.mandriva.com/security/ ___

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Razi Shaban
Dennis, > > In order for the UN to effectively work, The leaders of the UN and members > of the UN security council cant be corrupt and on the take from the oil for > food program. The idea behind the United Nations was that of collective security, where basically if one nation steps out of lin

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Dennis Henderson
> -Original Message- > From: Razi Shaban [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 27, 2008 11:14 AM > To: [EMAIL PROTECTED] > Cc: full-disclosure@lists.grok.org.uk > Subject: Re: [Full-disclosure] Free Iraq > > Touche. > > Now a question. Is the USA a member of the UN? Okay.

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread Bill Stout
Valdis, Good point, I didn't know that. I did find a link to Fitna, that politically censored movie. Indirectly related to the thread. Now I have to brush up on my Dutch. http://www.liveleak.com/view?i=ee4_1206625795 Bil Stout - Original Message > From: "[EMAIL PROTECTED]" <[EMAIL P

[Full-disclosure] Free Beer

2008-03-27 Thread Larry Seltzer
Moving beyond the old partisan politics, a cause we can all get behind. Larry Seltzer eWEEK.com Security Center Editor http://security.eweek.com/ http://blogs.pcmag.com/securitywatch/

Re: [Full-disclosure] Free Iraq

2008-03-27 Thread [EMAIL PROTECTED]
> On Wed, Mar 27, 2008 at 3:56 PM, M.B. Jr. wrote: > >there is absolutely no sense in evoking 1990's UN-authorized action... > > You can stop right there M.B. You claim there was no sense in evoking [sic] the UN's authorization of 1990? That you appear to not understand what the words "Cease Fi

[Full-disclosure] Re: [Full-disclosure] 答复: 答复: [Full-disclo sure] The reason why "Pangolin is backdoor"

2008-03-27 Thread taneja . security
Why to believe on Antivirus !!! check it out urself ..No malicious activity no bot, no keylogger, plain code to .:) Then what is the meaning of BACKDOORED?? On 3/27/08, zwell.nosec <[EMAIL PROTECTED]> wrote: > > Oh, Really? > So you can compress using UPX again, then upload to virustotal.

Re: [Full-disclosure] Pangolin v1.2.590 - The best SQLinjector you've ever seen

2008-03-27 Thread Luther D. Anderson
Mike and the Twinkies, You're a genius. To the other security twinkies that are very well versed in strings analysis please get another job at the local newspaper co. So if it went clear through VirusTotal you would run it on your machines? I'd be happy to provide a DumbassTotal service for all o