[Full-disclosure] Inside India’s CAPTCHA Solvi ng Economy

2008-08-30 Thread Dancho Danchev
Hello, The following article aims to expose a booming CAPTCHA solving economy in India, employing thousands of legitimate data processing workers, whose business model is already being abused by cybercriminals paying pocket money for using it : Let's analyze the shady data processing economy of

[Full-disclosure] hackmeeting: call for participation

2008-08-30 Thread bomboclat
The Call for Papers for the Hackmeeting 2008 to be held in Palermo, Sicily is now open. Hackmeeting is the gathering of all the hackers communities spread around Italy since 11 years ago, it's a three-days happening with workshops, speeches, knowledge sharing in the spirit of the “put your hands

[Full-disclosure] Honeypot?

2008-08-30 Thread James Lay
So...one of the networks I monitor has this ip: 66.139.73.183 Doing netbios scans on it. A cursory inspection shows it as a win2003 box...that¹s WIDE open. Could this be a honeypot that¹s been compromised? Curious ___ Full-Disclosure - We believe in

Re: [Full-disclosure] [inbox] Honeypot?

2008-08-30 Thread Exibar
so do you work for Salsoft, or are you trying to break into a machine owned by them? If it's a network you monitor, meaning you have direct responsibility for, wouldn't you already know if it's a honeypot? sounds fishy that you have to ask Exibar _ From: [EMAIL PROTECTED]

Re: [Full-disclosure] [inbox] Honeypot?

2008-08-30 Thread James Lay
The network I monitor was getting scanned by the below IP. It stopped now though :) On 8/30/08 12:02 PM, Exibar [EMAIL PROTECTED] wrote: so do you work for Salsoft, or are you trying to break into a machine owned by them? If it's a network you monitor, meaning you have direct

Re: [Full-disclosure] Inside India’s CAPTCHA Solvi ng Economy

2008-08-30 Thread coderman
On Fri, Aug 29, 2008 at 1:08 PM, Dancho Danchev [EMAIL PROTECTED] wrote: ... Indian workers breaking MySpace and Google CAPTCHAs, OH MY GOD SIR someone should make this illegal!!! (then CAPTCHA would be secure...) *cough* ___ Full-Disclosure - We

Re: [Full-disclosure] Inside India’s CAPTCHA Solvi ng Economy

2008-08-30 Thread Razi Shaban
If nothing else, CAPTCHA is increasing the bad guys' costs of doing business, and that's a good thing. By two dollars per thousand email addresses. Yahoo allows 100 emails per hour. That means that they're spending two dollars to send 2,400,000 emails per day. Sounds pretty expensive to me.

Re: [Full-disclosure] Inside India’s CAPTCHA Solvi ng Economy

2008-08-30 Thread n3td3v
I must stress this isn't breaking news, its been going on for years... All the best, n3td3v https://groups.google.com/group/n3td3v ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and

[Full-disclosure] [PLSA 2008-32] Mono: Cross Site Scripting

2008-08-30 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-32[EMAIL PROTECTED] Date: 2008-08-31 Severity: 2 Type: Remote

[Full-disclosure] [PLSA 2008-33] [UPDATED] Opensc: Security Bypass

2008-08-30 Thread Pınar Yanardağ
Pardus Linux Security Advisory 2008-33[EMAIL PROTECTED] Date: 2008-08-31 Severity: 2 Type: Remote

[Full-disclosure] Gustav, domain name reportage

2008-08-30 Thread n3td3v
http://linuxbox.org/pipermail/funsec/2008-August/018318.html http://isc.sans.org/diary.html?storyid=4954 Hi, I think its wrong for you to name and shame these domain names, and specify places people live (funsec), seeing as these folks have done nothing wrong. Guilty until proven innocent, is

Re: [Full-disclosure] Inside India’s CAPTCHA Solvin g Economy

2008-08-30 Thread Paul Schmehl
--On August 31, 2008 2:43:32 AM +0300 Razi Shaban [EMAIL PROTECTED] wrote: If nothing else, CAPTCHA is increasing the bad guys' costs of doing business, and that's a good thing. By two dollars per thousand email addresses. Yahoo allows 100 emails per hour. That means that they're spending

Re: [Full-disclosure] Gustav, domain name reportage

2008-08-30 Thread n3td3v
All i'm saying is, don't copy these idiots, Marcus Sachs and Jon.Kibler if you are going to be talking about domain names this hurricane season, thats the message I want to get out to folks. While its probably most likely these domains are malicious, its wrong to list them, so publically in this

Re: [Full-disclosure] Inside India’s CAPTCHA Solvi ng Economy

2008-08-30 Thread Valdis . Kletnieks
On Sun, 31 Aug 2008 00:51:50 BST, n3td3v said: herders to use. I don't know if thats what the Dancho Danchev blog post is about because I refuse to read anything by him or Zdnet. OK, so you don't know if what we're talking about is what you're talking about, you refuse to find out, but you

Re: [Full-disclosure] Gustav, domain name reportage

2008-08-30 Thread n3td3v
On Sun, Aug 31, 2008 at 4:38 AM, n3td3v [EMAIL PROTECTED] wrote: All i'm saying is, don't copy these idiots, Marcus Sachs and Jon.Kibler if you are going to be talking about domain names this hurricane season, thats the message I want to get out to folks. While its probably most likely these

Re: [Full-disclosure] Gustav, domain name reportage

2008-08-30 Thread Valdis . Kletnieks
On Sun, 31 Aug 2008 05:12:12 BST, n3td3v said: As for domain name retailers being named and shamed on funsec, I would be taking legal action at this stage if I was a domain name retailer, And your legal reasoning would be, what, exactly? Even under the US's rather wonky legal system, you

Re: [Full-disclosure] Gustav, domain name reportage

2008-08-30 Thread n3td3v
On Sun, Aug 31, 2008 at 5:18 AM, [EMAIL PROTECTED] wrote: On Sun, 31 Aug 2008 05:12:12 BST, n3td3v said: As for domain name retailers being named and shamed on funsec, I would be taking legal action at this stage if I was a domain name retailer, And your legal reasoning would be, what,

Re: [Full-disclosure] Gustav, domain name reportage

2008-08-30 Thread Valdis . Kletnieks
On Sun, 31 Aug 2008 05:23:00 BST, n3td3v said: 3) If accusations of domain name retailers start appearing in the press, I don't think the domain name retailers are going to be too happy, seeing as those customers at this stage haven't commited any offence. And the actual *damages* would be

Re: [Full-disclosure] Inside India’s CAPTCHA Solvin g Economy

2008-08-30 Thread Raj Mathur
On Sunday 31 Aug 2008, n3td3v wrote: At least its giving hundreds of thousands of poor indians employment, by paying them to manually create internet accounts for bot net herders to use. I don't know if thats what the Dancho Danchev blog post is about because I refuse to read anything by him