[Full-disclosure] Telecom Italia Alice Pirelli routers backdoor discoverd to activate telnet/ftp/tftp from internal LAN/WLAN.

2008-10-13 Thread drpepperONE drpepperONE
# saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CP

Re: [Full-disclosure] security industry software license

2008-10-13 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, Oct 13, 2008 at 6:43 PM, rysheve <[EMAIL PROTECTED]> wrote: > So are you talking about Actionable Intelligence? Why should the > government be gathering any intelligence on me unless I am the target > of an investigation? Maybe I should also h

Re: [Full-disclosure] actionable intelligence

2008-10-13 Thread n3td3v
What would the scheme be? On Tue, Oct 14, 2008 at 2:46 AM, vulcanius <[EMAIL PROTECTED]> wrote: > You should pursue something more realistic, like getting the FD list > moderated. > > On Mon, Oct 13, 2008 at 9:22 PM, n3td3v <[EMAIL PROTECTED]> wrote: >> >> how can we start to make intelligence act

Re: [Full-disclosure] security industry software license

2008-10-13 Thread rysheve
So are you talking about Actionable Intelligence? Why should the government be gathering any intelligence on me unless I am the target of an investigation? Maybe I should also have to register my I.D. to any device that I connect to the Internet. I bet that would provide lost of actionable

Re: [Full-disclosure] actionable intelligence

2008-10-13 Thread vulcanius
You should pursue something more realistic, like getting the FD list moderated. On Mon, Oct 13, 2008 at 9:22 PM, n3td3v <[EMAIL PROTECTED]> wrote: > how can we start to make intelligence actionable? how can we take > intelligence from an idle state into an actionable state? what kind of > schemes

[Full-disclosure] actionable intelligence

2008-10-13 Thread n3td3v
how can we start to make intelligence actionable? how can we take intelligence from an idle state into an actionable state? what kind of schemes can we setup to make intelligence more actionable to locker out the bad guys? what can we do as a community to get more of the intelligence that is alread

Re: [Full-disclosure] security industry software license

2008-10-13 Thread n3td3v
The intelligence about who downloads metasploit is already there, but currently it is not actionable intelligence. The license scheme would start to make that intelligence actionable, without the scheme, you've got intelligence sitting there that can't be used in an actionable way. Its all about

Re: [Full-disclosure] security industry software license

2008-10-13 Thread n3td3v
On Mon, Oct 13, 2008 at 11:00 AM, Michael Simpson <[EMAIL PROTECTED]> wrote: > On 10/13/08, n3td3v <[EMAIL PROTECTED]> wrote: >> On Mon, Oct 13, 2008 at 2:58 AM, vulcanius <[EMAIL PROTECTED]> wrote: >> > Do you honestly believe such a thing could ever happen or are you just >> > speculating for no

Re: [Full-disclosure] security industry software license

2008-10-13 Thread M . B . Jr .
Any OSI-based set, but without enforcing security-through-obscurity concepts. Maybe adapting some Bell-LaPadula ideas. There are lots of models to discuss about. The real question however is: can we start fresh? On Mon, Oct 13, 2008 at 1:57 PM, Buhrmaster, Gary <[EMAIL PROTECTED]> wrote: > >> >

Re: [Full-disclosure] security industry software license

2008-10-13 Thread Buhrmaster, Gary
> > * writing a whole new set of protocols to be used over a whole new > > independent backbone infrastructure; and > > I suggest the OSI protocol stack, for the security-through-obscurity > benefits. ASN.1, anybody? :) > GOSIP anyone? I think the DMS was claimed to be more secure since i

Re: [Full-disclosure] Fwd: UK government monitoring

2008-10-13 Thread Valdis . Kletnieks
On Mon, 13 Oct 2008 16:26:57 BST, n3td3v said: > On Mon, Oct 13, 2008 at 7:31 AM, <[EMAIL PROTECTED]> wrote: > > Oh, it *will* help. Just not help with bringing crime down. > > This in reality is nothing to do with crime, but to assist > http://intelligence.gov.uk to do their job. As I said - i

Re: [Full-disclosure] security industry software license

2008-10-13 Thread Valdis . Kletnieks
On Mon, 13 Oct 2008 12:53:31 -0300, "M.B.Jr." said: > * writing a whole new set of protocols to be used over a whole new > independent backbone infrastructure; and I suggest the OSI protocol stack, for the security-through-obscurity benefits. ASN.1, anybody? :) pgpjRQhOKvcxD.pgp Description:

Re: [Full-disclosure] security industry software license

2008-10-13 Thread M . B . Jr .
Dear n3td3v, the dreamer, concerning your suggestion -- which is a noble one -- in a wider context, you'd better start with two things: * writing a whole new set of protocols to be used over a whole new independent backbone infrastructure; and * convincing the world to forget about TCP. Be

Re: [Full-disclosure] security industry software license

2008-10-13 Thread n3td3v
On Mon, Oct 13, 2008 at 11:00 AM, Michael Simpson <[EMAIL PROTECTED]> wrote: > you appear to be the one desperate to meet up > >>if you want to meet up to sort out your issue, then arrange a >>date...im sick of you spear targeting me, fuck off. > > lol you wanna hurt me :-) > you would most likely

[Full-disclosure] Uninformed Journal Release Announcement: Volume 10

2008-10-13 Thread fdlist
Uninformed is pleased to announce the release of its 10th volume which is composed of 4 articles: Engineering in Reverse - Can you find me now? Unlocking the Verizon Wireless xv6800 (HTC Titan) GPS Author: Skywing - Using dual-mappings to evade automated unpackers Author: skape Exp

Re: [Full-disclosure] Fwd: UK government monitoring

2008-10-13 Thread n3td3v
On Mon, Oct 13, 2008 at 7:31 AM, <[EMAIL PROTECTED]> wrote: > On Sun, 12 Oct 2008 23:17:38 PDT, James Matthews said: > >> I think the irony of the situation is that they have their CCTV cameras for >> years now and they didn't bring crime down. How will this database help? > > Oh, it *will* help.

Re: [Full-disclosure] security industry software license

2008-10-13 Thread Michael Simpson
On 10/13/08, n3td3v <[EMAIL PROTECTED]> wrote: > On Mon, Oct 13, 2008 at 2:58 AM, vulcanius <[EMAIL PROTECTED]> wrote: > > Do you honestly believe such a thing could ever happen or are you just > > speculating for no reason? > > No I wasn't on drugs when I wrote this email... but mike simpson my >