Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-09-29 Thread quispiam lepidus
Whilst I agree that criminal actions should be met with criminal consequences, 60 years for breaking (I use the term losely) into shittily protected systems is absurd. You do less time for murder in most places. I wonder, if he was an American citizen, would he have been charged with treason and e

[Full-disclosure] [ MDVSA-2008:208 ] pam_mount

2008-09-29 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:208 http://www.mandriva.com/security/

Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-09-29 Thread n3td3v
nobody could be so stupid to leave their car door unlocked, ::blush:: the u.s military did, then gary mckinnon left a note on their wind screen wiper to say, look guys, you left your door unlocked, maybe you should fix it. the u.s military come back to the car, and claim the inside of the car has

Re: [Full-disclosure] [inbox] Re: Supporters urge halt to, hacker's, extradition to US

2008-09-29 Thread Exibar
So you guys are saying that if I forget my keys in my car and the door unlocked that it's not a crime to steal my car? It's not a crime to NOT lock your house, but it's still a crime to open that door and take that big screen tv if you're not the owner... Doesn't matter if he willfully caus

[Full-disclosure] THC releases video and tool to create fake ePassports

2008-09-29 Thread rm
http://blog.thc.org/index.php?/archives/4-The-Risk-of-ePassports-and-RFID.html http://freeworld.thc.org/thc-epassport/ 29th September 2008 THC/vonJeek proudly presents an ePassport emulator. This emulator applet allows you to create a backup of your own passport chip(s). A video demonstrating

[Full-disclosure] WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability

2008-09-29 Thread Juan Galiana
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Security Advisory - - - WordPress MU < 2.6 wpmu-blogs.php Crose Site Scrpting vulnerability - - --- Product: Wordpress-MU (multi-user) Version: Versions prior to 2.6 are affected

[Full-disclosure] [ MDVSA-2008:207 ] openafs

2008-09-29 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2008:207 http://www.mandriva.com/security/

Re: [Full-disclosure] Supporters urge halt to, hacker's, extradition to US

2008-09-29 Thread Kyrian
Further to Exibar's previous email, now I've been through the links that worked (one seemed to have been 8.3 truncated)... There does seem to be a substantial lets say "pro-american-hacker" bias in the text of the pages you provided links for. > McKinnon did cause damage: > "The charges" say

Re: [Full-disclosure] very strange emails (email 1/2) Fwd: Sorry I did not reply sooner

2008-09-29 Thread James Matthews
I am wondering how someone was so board to write an email like that. And what he expects in return. He should at least use key words like the patriot act etc.. On Fri, Sep 26, 2008 at 8:31 PM, <[EMAIL PROTECTED]> wrote: > On Sat, 27 Sep 2008 06:34:44 +0500, cissp79 said: > > > ive received 2 very

Re: [Full-disclosure] very strange emails (email 1/2) Fwd: Sorry I did not reply sooner

2008-09-29 Thread Valdis . Kletnieks
On Sat, 27 Sep 2008 06:34:44 +0500, cissp79 said: > ive received 2 very strange emails and not sure why they have arrived in my > inbox Figuring these sort of things out is usually a *lot* easier when you have *all* the e-mail headers, not just the 3-4 lines created by the 'Forwarded message' fea

Re: [Full-disclosure] Supporters urge halt to, hacker's, extradition to US

2008-09-29 Thread n3td3v
I just think someone from the military should be in the dock as well!!! This wasn't a one sided security incident, sloppy admins were involved in the 'threat to national security' that Gary Mckinnon supposedly posed. The passwords on the systems weren't set, if it wasn't Gary Mckinnon it was going

Re: [Full-disclosure] Supporters urge halt to, hacker's, extradition to US

2008-09-29 Thread Kyrian
Folks, Thanks to "Exibar" for the (likely) clarification. No issue in converting from metric, incidentally ;-) I will check out the links you provided this evening and make up my own mind. As stated, I did go to the thing, but wasn't shouting at chanting, because I felt something was certainly a

Re: [Full-disclosure] [inbox] Re: Supporters urge halt to hacker's, extradition to US

2008-09-29 Thread n3td3v
I wouldn't waste my time locking up a script kid for 60 years, Gary Mckinnon is a small fish in a big ocean, there are bigger fish to fry. Its the military's fault he got in, because they hadn't set any passwords for the systems. All the best, n3td3v On Sun, Sep 28, 2008 at 7:03 PM, Exibar <[EM

[Full-disclosure] W3C filtered as child porn by Finnish ISP

2008-09-29 Thread Juha-Matti Laurio
According to Neural Broadcaster blog of Martti Roitto: "Due to reasons yet to be determined, the website of the World Wide Web Consortium, w3.org/w3c.org, is being filtered as child pornography (wget/curl) by the Finnish ISP, DNA Internet. Update Sept 27. 3PM: DNA has removed w3c from their lis

[Full-disclosure] CAcert non-persistent XSS

2008-09-29 Thread Alexander Klink
Hi, normally I wouldn't bother much posting a simple XSS here, but I'll make an exception for CAcert today. Kriss Andsten's blog post (http://www.shortpacket.org/2008/08/cacertorg-you-got-what-you-paid-for.html) made me want to take a look at the CAcert source myself, and so I did on Friday. It