Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread PsychoBilly
The_UT went to jail because his Gonzales m8 kindly supplied irc logs of their chats to the fed // not for coding a tool. The jury recused the not knowing defense strategy on that base. [[ J Roger ]] possibly emitted, @Time [[ 28/04/2010 00:48 ]] The Following #String jail. According

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Ed Carp
How about not writing a hacking tool in the first place that you know will be used to rip other people off?? Wow...what a concept...OF COURSE he knew the code he was writing was going to be used to rip people off. ___ Full-Disclosure - We believe in

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Christian Sciberras
Yeah, I agree! While at it, factories should start producing blunt knives! And what with the flammable deodorants? They should be made illegal!! On Mon, May 3, 2010 at 11:52 AM, Ed Carp e...@pobox.com wrote: How about not writing a hacking tool in the first place that you know will be used to

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Ed Carp
Oh, stop it. If you give your buddy a knife, knowing they're going to go out and stab someone with it, you're going to jail, too. Stop playing the fool. ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Christian Sciberras
No, I'm being damn realistic. If it weren't me providing a knife to my buddy it would be someone else, or some kitchen drawer. Also, why do I go to jail, not the shop owner that sold me the knife? Or the factory owner? It's this guy that should be liable to the crime, not the provider. On Mon,

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Dietz Pröpper
Ed Carp: How about not writing a hacking tool in the first place that you know will be used to rip other people off?? Wow...what a concept...OF COURSE he knew the code he was writing was going to be used to rip people off. How about closing mailing lists like the one you posted to?

[Full-disclosure] [SECURITY] [DSA 2040-1] New squidguard packages fix several vulnerabilities

2010-05-03 Thread Sebastien Delafond
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - Debian Security Advisory DSA-2040-1 secur...@debian.org http://www.debian.org/security/ Sébastien Delafond May 02, 2010

Re: [Full-disclosure] Impossible to Maintain Secure Session With Twitter.com Web Interface

2010-05-03 Thread Sam Quigley
iSEC Partners Security Advisory - 2010-001-twitter https://www.isecpartners.com […] 2010-04-26: Twitter asserts that it is now possible to maintain an HTTPS session if the session begins with HTTPS; i.e. users can navigate to https://twitter.com to start an HTTPS

[Full-disclosure] Cross-Site Scripting vulnerability in Mango

2010-05-03 Thread MustLive
Hello Full-Disclosure! I want to warn you about security vulnerability in Mango. - Advisory: Cross-Site Scripting vulnerability in Mango - URL: http://websecurity.com.ua/3949/ - Affected product: Mango 1.4.1 and

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread T Biehn
It's important to create a thriving market for these utilities, and as part of the internet community to foster their development. The 'malicious code' - profit ecosystem is paramount to maintaining order between corporate, governmental and public interests. lol. -Travis On Mon, May 3, 2010 at

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Ed Carp
So Mr. Watt got 2 years simply because he was aware of the ongoing crimes and did not report them to the authorities? No. What he did was the same thing as someone supplying burglar tools to someone, knowing that they're going to break into someone's house, then partying with them afterwards

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread T Biehn
Which is why this analogy is flawed. -Travis On Mon, May 3, 2010 at 12:27 PM, Marsh Ray ma...@extendedsubset.com wrote: If your knife is found in a dead body, you've going to have some explaining to do. If it turns out that you're a restaurant supply business that sells 3000 of that model

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread J Roger
In the United States the burden of proof is on the prosecution, not the defense. Stephen was innocent until proven guilty. I'm suggesting Stephen could have released his tool to the public so anyone authorized to audit cardholder data environments could have used it. What he did was the same

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Ed Carp
I can see that you have no experience with the legal system other than what you've seen on TV (which is, to say, none at all). If you read the IRC logs presented by the prosecution, it is pretty clear what the motive was. Your release it to the public and you have no liability argument will land

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Marsh Ray
On 5/3/2010 12:29 PM, J Roger wrote: If the tool was released publicly, how much more difficult would it have been for the prosecution to prove that you knew the tool was intended to be used for a particular illegal purpose in a specific case and you went out of your way to help? Perhaps

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread J Roger
I can see that you have no experience with the legal system other than what you've seen on TV (which is, to say, none at all). I know this is the Internet but you don't need to be quite so rude. Perhaps I just haven't been arrested (caught) as many times as you have. If you read the IRC

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread T Biehn
I once logged a guy on IRC who said he was going to packet me off the face of the tubes. So I sent my Mirc logs to the FBI when i lost my AOL connection. He went to jail forever. -Travis On Mon, May 3, 2010 at 1:56 PM, J Roger securityho...@gmail.com wrote: I can see that you have no

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Ed Carp
There were excerpts in the Wired article, and there are more in the court record - I'll see if I can find the link in my browser history. Quite interesting reading, actually... On 5/3/10, J Roger securityho...@gmail.com wrote: I can see that you have no experience with the legal system other

[Full-disclosure] [ MDVSA-2010:089 ] gnutls

2010-05-03 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2010:089 http://www.mandriva.com/security/

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Christian Sciberras
Which is why the creators of Wireshark has long been prosecuted and landed in jail for 30 years Oh wait, they weren't? On Mon, May 3, 2010 at 7:46 PM, Ed Carp e...@pobox.com wrote: I can see that you have no experience with the legal system other than what you've seen on TV (which is, to

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread J Roger
There were excerpts in the Wired article, and there are more in the court record One has to begin wondering: A) Why did Gonzales keep logs of incriminating evidence against himself and his friends in the first place? B) What motivation did Gonzales have for rolling over on Stephen like that?

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Valdis . Kletnieks
On Mon, 03 May 2010 13:09:43 PDT, J Roger said: A) Why did Gonzales keep logs of incriminating evidence against himself and his friends in the first place? Probably because of... C) Another Wired article states that Gonzales was an informer paid an annual salary by the Secret Service. The

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread J Roger
From what I gather, the Secret Service were paying Gonzales to inform on people associated with the Shadow Crew and knew nothing about his TJX endeavors at the time. It would not have been in Gonzales' interest to log and inform on anything related to his side activities JRoger On Mon, May 3,

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread Valdis . Kletnieks
On Mon, 03 May 2010 13:59:45 PDT, J Roger said: From what I gather, the Secret Service were paying Gonzales to inform on people associated with the Shadow Crew and knew nothing about his TJX endeavors at the time. It would not have been in Gonzales' interest to log and inform on anything

Re: [Full-disclosure] go public to avoid jail

2010-05-03 Thread mutiny
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Way to over stretch what he was talking about. Stop trying to ban shit, you're not solving any problems. Didn't we already do the blacklist thing a hundred thousand times? Ed Carp wrote: Oh, stop it. If you give your buddy a knife, knowing