[Full-disclosure] Vulnerability Httpdx v1.5.3b

2010-03-19 Thread Mehdi Mahdjoub - Sysdream IT Security Services
Program : Httpdx v1.5.3b PoC : Remote Crash Service (if http.log=1) Homepage : http://sourceforge.net/projects/httpdx/ Found by : Jonathan Salwan This Advisory: Jonathan Salwan Contact : j.sal...@sysdream.com //- Application description

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
On Thu, Mar 18, 2010 at 6:42 PM, Fetch, Brandon bfe...@tpg.com wrote: But wait!  That paper fingerprint can be captured and added to the RFID data already saved! *tongue firmly in cheek* No one would be devious enough to duplicate or forge secured RFID data in our passports now would

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread T Biehn
Excellent point. Travis On Fri, Mar 19, 2010 at 12:24 PM, james o' hare jamesohar...@googlemail.com wrote: On Thu, Mar 18, 2010 at 6:42 PM, Fetch, Brandon bfe...@tpg.com wrote: But wait!  That paper fingerprint can be captured and added to the RFID data already saved! *tongue firmly in

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread mrx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Consider a production line for printing anything that is used for access control. Now providing there is absolute consistency across every sample of the material printed/magnetised or otherwise marked during a production run, then only one token

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
Do you think Gadi post this on purpose as a warning to the British government that the Israeli government want this technology broken by someone on the list? Why else would the Israeli's post to a British mailing list to tell us about our own techology that we already know about because we made

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread Valdis . Kletnieks
On Fri, 19 Mar 2010 20:51:40 -, mrx said: Consider a production line for printing anything that is used for access control. Now providing there is absolutea consistency across every sample of the material printed/magnetised or otherwise marked during a production run, then only one token

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
On Fri, Mar 19, 2010 at 10:00 PM, valdis.kletni...@vt.edu wrote: the fine article says You would be better going to http://www.ingeniatechnology.com/ to find out about it than read crap web sites that the Israeli's appear to read. There are PDF reports, Brochures and videos on the web site,

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread mrx
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 valdis.kletni...@vt.edu wrote: On Fri, 19 Mar 2010 20:51:40 -, mrx said: Consider a production line for printing anything that is used for access control. Now providing there is absolutea consistency across every sample of the material

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
On Fri, Mar 19, 2010 at 11:13 PM, james o' hare jamesohar...@googlemail.com wrote: On Fri, Mar 19, 2010 at 10:00 PM,  valdis.kletni...@vt.edu wrote: the fine article says You would be better going to http://www.ingeniatechnology.com/ to find out about it than read crap web sites that the

[Full-disclosure] [ MDVSA-2010:062 ] curl

2010-03-19 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2010:062 http://www.mandriva.com/security/

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
On Thu, Mar 18, 2010 at 3:17 PM, Gadi Evron g...@linuxbox.org wrote: Expect to see this technology at an airport near you, in five years or so. Gadi accidentally posting a 5 year old article and said this will be in every airport in 5 years. What's funnier, this or his buddy Larry posting about

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread T Biehn
X, The point is that material isn't consistent. Duh. -Travis On Mar 19, 2010 4:58 PM, mrx m...@propergander.org.uk wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Consider a production line for printing anything that... sample of the material printed/magnetised or otherwise marked during

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread T Biehn
What 'limits'? What 'acceptable range' are you talking about? I think they scan the surface doing pit depth / pit counts like an expensive cd reader. Within this presumption, you have to fingerprint either the whole document or a small square. It cannot be duplicated, it cannot be used to

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread Valdis . Kletnieks
On Fri, 19 Mar 2010 21:58:30 -, james o' hare said: In other news it seems Dan Kaminsky has defected over to the Israeli side to help them work out how to crack it. Dude. Take your meds. It's not all about Mossad. Or at least learn as much about biometrics as the average CISSP does (at

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
On Sat, Mar 20, 2010 at 3:57 AM, valdis.kletni...@vt.edu wrote: at least learn as much about biometrics as the average CISSP Does your average CISSP forget to research before they claim something will be in every airport in 5 years time, with a citation of an article that is 5 years old.

Re: [Full-disclosure] Fingerprinting Paper with Laser

2010-03-19 Thread james o' hare
On Sat, Mar 20, 2010 at 3:57 AM, valdis.kletni...@vt.edu wrote: what Dan actually wrote was the kindergarden level He had to speak in laymans terms so Gadi could understand biometrics. Andrew ___ Full-Disclosure - We believe in it. Charter: