Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Fernando Gont
At 04:50 p.m. 01/09/2008, coderman wrote: On Sun, Aug 31, 2008 at 10:44 PM, Fernando Gont [EMAIL PROTECTED] wrote: ... IETF Internet-Draft about port randomization... wget -qO - http://www.gont.com.ar/drafts/port-randomization/draft-ietf-tsvwg-port-randomization-02.txt | grep -i grsec is

[Full-disclosure] test

2008-09-02 Thread victor . harutyunyan
test ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Pavel Labushev
[EMAIL PROTECTED] ?: On Mon, 01 Sep 2008 15:51:35 CDT, rholgstad said: Linus doesn't care about security No, he actually *does* care about security - he's just pf the opinion that security fixes don't automatically rate a 'ZOMG! PWNED!' flag on them like certain *BSD variants think. He

[Full-disclosure] [SECURITY] [DSA 1634-1] New wordnet packages fix arbitrary code execution

2008-09-02 Thread Thijs Kinkhorst
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-1634-1 [EMAIL PROTECTED] http://www.debian.org/security/ Thijs Kinkhorst September 01, 2008

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread coderman
On Tue, Sep 2, 2008 at 2:06 AM, Fernando Gont [EMAIL PROTECTED] wrote: ... there's no description of what Windows does some things speak for themselves... :) Also, the base Linux system already implements Algorithm #3... why ... patch if you seed/key #3 poorly, as just one example. (which

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Valdis . Kletnieks
On Tue, 02 Sep 2008 17:17:43 +0800, Pavel Labushev said: SECURITY PATCH tag on a fix helps me to know that there is the problem and I must consider the patch, check its correctness and maybe test/backport/apply it to my production systems ASAP. Just as another tags helps me to know that

Re: [Full-disclosure] die

2008-09-02 Thread James Matthews
Double Die On Tue, Sep 2, 2008 at 9:51 AM, anonymous pimp [EMAIL PROTECTED]wrote: die On 9/2/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: test ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] die

2008-09-02 Thread Jared DeMott
James Matthews wrote: Double Die Gang, telling people to die is not nice. Please refer to [1] or [2]. [1] http://www.elliottsamazing.com/kindergarden.html [2] http://en.wikipedia.org/wiki/Ethic_of_reciprocity ___ Full-Disclosure - We believe in it.

[Full-disclosure] security news on cnet???

2008-09-02 Thread n3td3v
you've not post any security news all week, what's going on cnet??? is the journalist that does the security news off ill??? :( yours, cnet fan -- https://groups.google.com/group/n3td3v ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] die

2008-09-02 Thread Valdis . Kletnieks
On Tue, 02 Sep 2008 13:57:05 EDT, Jared DeMott said: James Matthews wrote: Double Die Gang, telling people to die is not nice. Please refer to [1] or [2]. Ever notice that most of the 'die in a fire' comments come from top-posters? pgpAJWSgHSHs6.pgp Description: PGP signature

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Pavel Labushev
[EMAIL PROTECTED] ?: On Tue, 02 Sep 2008 17:17:43 +0800, Pavel Labushev said: SECURITY PATCH tag on a fix helps me to know that there is the problem and I must consider the patch, check its correctness and maybe test/backport/apply it to my production systems ASAP. Just as another

Re: [Full-disclosure] security news on cnet???

2008-09-02 Thread James Matthews
I also enjoy Cnet security news. On Tue, Sep 2, 2008 at 11:07 AM, n3td3v [EMAIL PROTECTED] wrote: you've not post any security news all week, what's going on cnet??? is the journalist that does the security news off ill??? :( yours, cnet fan -- https://groups.google.com/group/n3td3v

Re: [Full-disclosure] Port Randomization: New revision of our IETF Internet-Draft

2008-09-02 Thread Fernando Gont
At 11:15 a.m. 02/09/2008, coderman wrote: On Tue, Sep 2, 2008 at 2:06 AM, Fernando Gont [EMAIL PROTECTED] wrote: ... there's no description of what Windows does some things speak for themselves... :) What speaks for itself? Our work is a proposal for a few alternatives for doing port

Re: [Full-disclosure] die

2008-09-02 Thread Thedjatclubrock
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 anonymous pimp wrote: die On 9/2/08, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: test ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html

Re: [Full-disclosure] security news on cnet???

2008-09-02 Thread Randal T. Rioux
On Tue, Sep 2, 2008 at 11:07 AM, n3td3v [EMAIL PROTECTED] wrote: you've not post any security news all week, what's going on cnet??? is the journalist that does the security news off ill??? :( yours, cnet fan surely they will cave to pressure from the global powers of the netdev group. i

[Full-disclosure] [ MDVSA-2008:182 ] wordnet

2008-09-02 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:182 http://www.mandriva.com/security/

Re: [Full-disclosure] die

2008-09-02 Thread Dragos Ruiu
Please support the Internet campaign to de-vilify top posting. On 2-Sep-08, at 11:13 AM, [EMAIL PROTECTED] wrote: On Tue, 02 Sep 2008 13:57:05 EDT, Jared DeMott said: James Matthews wrote: Double Die Gang, telling people to die is not nice. Please refer to [1] or [2]. Ever notice that

Re: [Full-disclosure] die

2008-09-02 Thread [EMAIL PROTECTED]
It's often way too time consuming to navigate to bottom-posted commentary to form a reasonable sample size for assessment, so I'll have to take your word for it. From: [EMAIL PROTECTED] Sent: Tuesday, September 02, 2008 11:14 AM To: Jared DeMott [EMAIL

Re: [Full-disclosure] die

2008-09-02 Thread n3td3v
On Tue, Sep 2, 2008 at 6:50 PM, Thedjatclubrock [EMAIL PROTECTED] wrote: Can we please avoid messages like this one in the future, thank you. Who do you think you are, Gadi Evron or something? Don't tell people what to do. -- https://groups.google.com/group/n3td3v

Re: [Full-disclosure] die

2008-09-02 Thread Razi Shaban
On 9/2/08, n3td3v [EMAIL PROTECTED] wrote: On Tue, Sep 2, 2008 at 6:50 PM, Thedjatclubrock [EMAIL PROTECTED] wrote: Can we please avoid messages like this one in the future, thank you. Who do you think you are, Gadi Evron or something? Don't tell people what to do. Who do you think you

[Full-disclosure] [USN-639-1] tiff vulnerability

2008-09-02 Thread Kees Cook
=== Ubuntu Security Notice USN-639-1 September 02, 2008 tiff vulnerability CVE-2008-2327 === A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu

[Full-disclosure] [ MDVSA-2008:183 ] opensc

2008-09-02 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:183 http://www.mandriva.com/security/

Re: [Full-disclosure] die

2008-09-02 Thread Stephen Johnson
Subject: Re: [Full-disclosure] die Who do you think you are, Gadi Evron or something? Don't tell people what to do. Who do you think you are, Gadi Evron or something? Don't tell people what to do. Firefox has detected that the server is redirecting the request for this address in a

Re: [Full-disclosure] die

2008-09-02 Thread n3td3v
On Tue, Sep 2, 2008 at 10:07 PM, Stephen Johnson [EMAIL PROTECTED] wrote: Subject: Re: [Full-disclosure] die Who do you think you are, Gadi Evron or something? Don't tell people what to do. Who do you think you are, Gadi Evron or something? Don't tell people what to do. Firefox has

[Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread Rishi Narang
Hi, --- Software: Google Chrome Browser 0.2.149.27 Tested: Windows XP Professional SP3 Result: Google Chrome Crashes with All Tabs Problem: An issue exists in how chrome behaves with undefined-handlers in chrome.dll version 0.2.149.27. A crash

Re: [Full-disclosure] die

2008-09-02 Thread Nick FitzGerald
Dragos Ruiu wrote: Seriously... with modern multi-paned mail readers, top-posting is a better way to communicate. That depends on how you define communicate... It also assumes that everyone will gladly, sheepfully use modern, multi- paned mail readers. You may be a sheep whose

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread n3td3v
On Wed, Sep 3, 2008 at 12:50 AM, Rishi Narang [EMAIL PROTECTED] wrote: Proof of Concept: http://evilfingers.com/advisory/google_chrome_poc.php You didn't manage to jail break the entire browser, thats whats unique about Chrome, each tab is in jail, so the entire application doesn't crash. The

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread Rishi Narang
Hello Larry, Ya, a beta browser (though I forgot to mention it) but, is there any product from Google not in Beta ;) Thanks, our searches are not through a beta search engine. Anyways, it's just an attempt to make it a better place to browse and help it come out of Beta. Rest, I very much

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread silky
On Wed, Sep 3, 2008 at 10:13 AM, Larry Seltzer [EMAIL PROTECTED] wrote: Holy crap, a crash bug in a beta browser! oh fuck off with referring to it as beta. beta is just a lame tag so you can release something that you don't entirely trust. imho if it's beta keep it fucking private. if it's

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread n3td3v
On Wed, Sep 3, 2008 at 1:28 AM, Rishi Narang [EMAIL PROTECTED] wrote: Hello Larry, Ya, a beta browser (though I forgot to mention it) but, is there any product from Google not in Beta ;) Thanks, our searches are not through a beta search engine. Anyways, it's just an attempt to make it a

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread Jardel Weyrich
I'd recommend you to read http://en.wikipedia.org/wiki/Software_release_life_cycle#Beta On Tue, Sep 2, 2008 at 9:35 PM, silky [EMAIL PROTECTED] wrote: On Wed, Sep 3, 2008 at 10:13 AM, Larry Seltzer [EMAIL PROTECTED] wrote: Holy crap, a crash bug in a beta browser! oh fuck off with

[Full-disclosure] RUXCON 2008 Final Call For Papers

2008-09-02 Thread cfp
RUXCON 2008 FINAL CALL FOR PAPERS Ruxcon would like to announce the final call for papers for the fifth annual Ruxcon conference. This year the conference will take place over the weekend of 29th to the 30th of November. As with previous years, Ruxcon will be held at the University of

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread n3td3v
On Wed, Sep 3, 2008 at 1:58 AM, silky [EMAIL PROTECTED] wrote: On Wed, Sep 3, 2008 at 10:55 AM, Jardel Weyrich [EMAIL PROTECTED] wrote: I'd recommend you to read http://en.wikipedia.org/wiki/Software_release_life_cycle#Beta i'd recommend you re-read my post, and even that link. beta does

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread Giancarlo Razzolini
n3td3v escreveu: On Wed, Sep 3, 2008 at 1:58 AM, silky [EMAIL PROTECTED] wrote: On Wed, Sep 3, 2008 at 10:55 AM, Jardel Weyrich [EMAIL PROTECTED] wrote: I'd recommend you to read http://en.wikipedia.org/wiki/Software_release_life_cycle#Beta i'd recommend you re-read my post,

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread n3td3v
On Wed, Sep 3, 2008 at 3:01 AM, Giancarlo Razzolini [EMAIL PROTECTED] wrote: Discover it by yourself. Aren't you the bad ass guy of security? I'm just a member of the public, unemployed and stupid... maybe you can help me be badass... although i'd rather be a goodass, cause being badass is

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread Urlan
Por que todo esse alvoroço por causa de um bug na versão beta?! Viagem... Urlan On Tue, Sep 2, 2008 at 11:21 PM, n3td3v [EMAIL PROTECTED] wrote: On Wed, Sep 3, 2008 at 3:01 AM, Giancarlo Razzolini [EMAIL PROTECTED] wrote: Discover it by yourself. Aren't you the bad ass guy of security?

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread The Mad Hatter
On Tuesday 02 September 2008 23:28:33 Urlan wrote: Por que todo esse alvoroço por causa de um bug na versão beta?! pt: não seja tão imbecil en: don't be such a moron you are lame twice; first for posting in portuguese, then for giving a stupid negative contribution to the thread. if you don't

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread James Matthews
The same thing happened to safari when it came out on windows. On Tue, Sep 2, 2008 at 5:13 PM, Larry Seltzer [EMAIL PROTECTED]wrote: Holy crap, a crash bug in a beta browser! Larry Seltzer eWEEK.com Security Center Editor http://security.eweek.com/ http://blogs.pcmag.com/securitywatch/

Re: [Full-disclosure] Google Chrome Browser Vulnerability

2008-09-02 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -- James Matthews [EMAIL PROTECTED] wrote: The same thing happened to safari when it came out on windows. Well, no kidding. :-) Maybe the flaws that will hound Chrome are due to the fact that it uses Safari as a codebase? See also: