Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Christian Sciberras
Darren's and indeed many other people's lame excuse is that they're too humble to be greedy. As if! If anything, most people are greedier than that 1%. The only difference is that people are bad at it, unlike that 1%. Just consider the fact that Average Joe would be just too happy to evade tax.

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 2:51 AM, Christian Sciberras uuf6...@gmail.com wrote: Darren's and indeed many other people's lame excuse is that they're too humble to be greedy. As if! Its not about greed - pursuit of wealth is fine. You just can't harm others while doing it. (Well, apparently you can

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Christian Sciberras
Regarding who's doing the most damage to US economy, I'll just say I won't comment. I take issue with the 1%/99% idea; ie, the excuse that some people deserve more just because they are allowed to lie - even if it makes them hypocrites. On Wed, Oct 12, 2011 at 9:40 AM, Jeffrey Walton

Re: [Full-disclosure] Wipe off, rub out, reappear...

2011-10-12 Thread seclist
Just a little bit of creative thinking here... If the communications between the base and the drone are not encrypted and these communications have successfully been intercepted - Is it possible that in addition to the ability to collect videos transmitted by the drone, data could be sent to

[Full-disclosure] Google App Enging SDK Code Execution Vulnerability (CVE 2011-1364)

2011-10-12 Thread Adi Sharabani
We recently identified an interesting code execution vulnerability in the Google App Engine SDK for Python. By combining a CSRF vulnerability in the administration web UI, with some other unique vulnerabilities we found in the Google python libraries, a remote hacker could gain remote code

[Full-disclosure] Supermicro IPMI: backup function causes password to be stored at public web location

2011-10-12 Thread Floris Bos
== Product == Tested hardware: Supermicro X8SI6-F mainboard - IPMI firmware: 2.50 Supermicro X9SCL-F mainboard - IPMI firmware: 1.01 Likely affects other Supermicro boards of those generations that use the same type of firmware. == Problem == Modern servers often include a feature called

Re: [Full-disclosure] Bypassing Windows 7 kernel ASLR

2011-10-12 Thread Stéfan LE BERRE
Other methods are useful for user land but not in kernel land. In this paper I have bypassed ASLR and DEP too, not just one protection. Read it again ;-) Stefan LE BERRE De : sec...@gmail.com [mailto:sec...@gmail.com] De la part de GloW - XD Envoyé : mardi 11 octobre 2011 23:14 À : Stéfan

Re: [Full-disclosure] Supermicro IPMI: backup function causes password to be stored at public web location

2011-10-12 Thread Raymond Dijkxhoorn
Hi! Tested hardware: Supermicro X8SI6-F mainboard - IPMI firmware: 2.50 Supermicro X9SCL-F mainboard - IPMI firmware: 1.01 Likely affects other Supermicro boards of those generations that use the same type of firmware. == Problem == Modern servers often include a feature called IPMI

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Laurelai
On 10/12/2011 2:44 AM, Christian Sciberras wrote: Regarding who's doing the most damage to US economy, I'll just say I won't comment. I take issue with the 1%/99% idea; ie, the excuse that some people deserve more just because they are allowed to lie - even if it makes them hypocrites.

[Full-disclosure] Search and Seizure of Email

2011-10-12 Thread Daniel Sichel
In fact, law enforcement officials don?t even need a search warrant to access private emails. In point of fact, nobody does, although acquiring this access is clearly easier for law enforcement. One of the burdens that the freedom the Internet brings, is the freedom. Your email is out there,

Re: [Full-disclosure] Search and Seizure of Email

2011-10-12 Thread Christian Sciberras
Well said! On Wed, Oct 12, 2011 at 5:16 PM, Daniel Sichel dani...@ponderosatel.comwrote: In fact, law enforcement officials don?t even need a search warrant to access private emails. In point of fact, nobody does, although acquiring this access is clearly easier for law enforcement. One

Re: [Full-disclosure] Search and Seizure of Email

2011-10-12 Thread Laurelai
On 10/12/2011 10:33 AM, Christian Sciberras wrote: Well said! On Wed, Oct 12, 2011 at 5:16 PM, Daniel Sichel dani...@ponderosatel.com mailto:dani...@ponderosatel.com wrote: In fact, law enforcement officials don?t even need a search warrant to access private emails. In

Re: [Full-disclosure] Search and Seizure of Email

2011-10-12 Thread Christian Sciberras
I think you meant there is no guarantee that email is encrypted. You don't know if a provider is actually encrypting your mail unless you're doing this yourself. That's why there is no push. On Wed, Oct 12, 2011 at 5:54 PM, Laurelai laure...@oneechan.org wrote: On 10/12/2011 10:33 AM,

[Full-disclosure] Supermicro IPMI documentation omission: presence of second admin account

2011-10-12 Thread Floris Bos
The IPMI functionality of some Supermicro mainboards comes with two admin accounts by default, which are labeled in the webinterface: ADMIN Anonymous The official documentation only tells you to change the password of the ADMIN account: == Note: The manufacturer default username and password

[Full-disclosure] nSENSE-2011-003: Adobe Flash Media Server

2011-10-12 Thread Henri Lindberg
nSense Vulnerability Research Security Advisory NSENSE-2011-003 --- Affected Vendor:Adobe Affected Product: Adobe Flash media server Platform: Linux / Windows Impact: Remote

[Full-disclosure] nSense-2011-004: Azeotech DAQFactory

2011-10-12 Thread Henri Lindberg
nSense Vulnerability Research Security Advisory NSENSE-2011-004 --- Affected Vendor:Azeotech Affected Product: DAQFactory Platform: Windows Impact: Remote reboot/shutdown

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Thor (Hammer of God)
I saw this on FB and thought I would pass it along: http://99percentexif.tumblr.com/ It's the exif data from the photos the 99%'ers are posting - showing the $1000 systems, cameras, and software they are using to post. t From: full-disclosure-boun...@lists.grok.org.uk

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread David Alanis
Quoting Thor (Hammer of God) t...@hammerofgod.com: I saw this on FB and thought I would pass it along: http://99percentexif.tumblr.com/ It's the exif data from the photos the 99%'ers are posting - showing the $1000 systems, cameras, and software they are using to post. t To me this

Re: [Full-disclosure] Search and Seizure of Email

2011-10-12 Thread Justin Klein Keane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'll just leave this here: http://www.cybercrime.gov/ssmanual/03ssma.html Section D does list a search warrant, but also lists other mechanisms by which the government can compel a provider to turn over e-mail. The US government is restricted by the

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Laurelai
On 10/12/2011 12:20 PM, David Alanis wrote: Quoting Thor (Hammer of God)t...@hammerofgod.com: I saw this on FB and thought I would pass it along: http://99percentexif.tumblr.com/ It's the exif data from the photos the 99%'ers are posting - showing the $1000 systems, cameras, and software

[Full-disclosure] CORE-2011-0106: Microsoft Publisher 2007 Pubconv.dll Memory Corruption

2011-10-12 Thread CORE Security Technologies Advisories
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Core Security Technologies - Corelabs Advisory http://corelabs.coresecurity.com/ Microsoft Publisher 2007 Pubconv.dll Memory Corruption 1. *Advisory Information* Title: Microsoft Publisher 2007 Pubconv.dll Memory Corruption

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Thor (Hammer of God)
I know that if I was starving to death and couldn't afford medical care for my children that I wouldn't be sitting around with a $500 camera editing my photos with $700 software on a $1000 computer. Nor would I be sitting around in my apartment all day posting my woes on the Internet while the

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Thor (Hammer of God)
No, it goes to show you how much most of the people bitching about all of this are full of shit, as per the oldie but goodie Holiday in Cambodia by the Dead Kennedy's. The people who REALLY need help are not the ones sitting around all day posting shite on the internet. -Original

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Zach C.
Indeed? Are they supposed to be taking pictures of events with handmade cameras? Wearing clothes they made from the ground up? Not shaving or shaving with crudely-fashioned makeshift blades from spare metal? The usage of corporate products does not disqualify one from criticizing those

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Dan Becker
http://market-ticker.org/akcs-www?singlepost=2736937 Interesting read and its related. On Wed, Oct 12, 2011 at 10:57 AM, Thor (Hammer of God) t...@hammerofgod.com wrote: No, it goes to show you how much most of the people bitching about all of this are full of shit, as per the oldie but

[Full-disclosure] Snail mail vs. Email

2011-10-12 Thread Daniel Sichel
Well there is no push to make snail-mail encrypted and lets face it most peoples mailboxes don't have any sort of locking mechanisms and is available to anyone with two hands and the malicious intent to steal someones mail however the US Gov needs a warrant to intercept your physical mail,

[Full-disclosure] nSense-2011-006: Apple iOS

2011-10-12 Thread Henri Lindberg
20111012 Vendor releases fixed version of the software 20111012 Vendor releases public advisory Solution: Apple security updates are available via the Software Update mechanism: http://support.apple.com/kb/HT1338 Apple security updates

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Laurelai
On 10/12/2011 12:52 PM, Thor (Hammer of God) wrote: I know that if I was starving to death and couldn't afford medical care for my children that I wouldn't be sitting around with a $500 camera editing my photos with $700 software on a $1000 computer. Nor would I be sitting around in my

Re: [Full-disclosure] Snail mail vs. Email

2011-10-12 Thread Laurelai
On 10/12/2011 1:26 PM, Daniel Sichel wrote: Well there is no push to make snail-mail encrypted and lets face it most peoples mailboxes don't have any sort of locking mechanisms and is available to anyone with two hands and the malicious intent to steal someones mail however the US Gov needs

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Thor (Hammer of God)
Well, you said nor do I care so I too am confused. However, since you did ask, there is an important aspect to your retort that you seem ok with dancing over, and that is the fact the taxing millionaires and billionaires would be *additional* taxes. Mine won't go down, and in fact, will

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Paul Schmehl
--On October 12, 2011 11:00:32 AM -0700 Zach C. fxc...@gmail.com wrote: Indeed? Are they supposed to be taking pictures of events with handmade cameras? Wearing clothes they made from the ground up? Not shaving or shaving with crudely-fashioned makeshift blades from spare metal? The usage

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Benjamin Krueger
I thought the trolls made FD noisy and difficult to read. Boy was I wrong. On Oct 12, 2011, at 2:17 PM, Paul Schmehl wrote: --On October 12, 2011 11:00:32 AM -0700 Zach C. fxc...@gmail.com wrote: Indeed? Are they supposed to be taking pictures of events with handmade cameras? Wearing

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Paul Schmehl
The thing these stupid people don't seem to get is that millionaires and billionaires are the only ones that can afford to move elsewhere. Tax them enough and they'll simply move to another country. That's already what's happening with corporations and with some individuals. As their tax

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Michael Schmidt
And I thought this wasn't a place for politics, I am certain there are forums for that - or your Twitter or Facebook page or whatever, just not here. -Original Message- From: full-disclosure-boun...@lists.grok.org.uk [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Zach C.
I wasn't aware they were advocating the dissolution of all corporations; I had heard through various outlets that they simply didn't want money influencing laws to favor the corporation over the individual. As well as the bailing out of the banks while leaving the people homeless. And I don't

Re: [Full-disclosure] Snail mail vs. Email

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 4:09 PM, Laurelai laure...@oneechan.org wrote: On 10/12/2011 1:26 PM, Daniel Sichel wrote: Well there is no push to make snail-mail encrypted and lets face it most peoples mailboxes don't have any sort of locking mechanisms and is available to anyone with two hands and

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 3:44 AM, Christian Sciberras uuf6...@gmail.com wrote: Regarding who's doing the most damage to US economy, I'll just say I won't comment. I take issue with the 1%/99% idea; ie, the excuse that some people deserve more just because they are allowed to lie - even if it

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread David Alanis
Quoting Paul Schmehl pschmehl_li...@tx.rr.com: The thing these stupid people don't seem to get is that millionaires and billionaires are the only ones that can afford to move elsewhere. You're an idiot. If you think that Obama is a Muslim, that Obama care will bring upon death panels, that

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Ivan .
fast and furious http://www.youtube.com/watch?v=IC2C2lIwNSA On Wed, Oct 12, 2011 at 5:51 PM, Christian Sciberras uuf6...@gmail.comwrote: Darren's and indeed many other people's lame excuse is that they're too humble to be greedy. As if! If anything, most people are greedier than that 1%. The

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Ivan .
http://endoftheamericandream.com/archives/fast-and-furious-22-shocking-facts-about-the-scandal-that-could-bring-down-the-obama-administration On Thu, Oct 13, 2011 at 10:33 AM, David Alanis can...@dalan.us wrote: Quoting Paul Schmehl pschmehl_li...@tx.rr.com: The thing these stupid people

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Ivan .
http://www.businessinsider.com/what-wall-street-protesters-are-so-angry-about-2011-10?op=1 On Thu, Oct 13, 2011 at 10:29 AM, Ivan . ivan...@gmail.com wrote:

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Valdis . Kletnieks
On Wed, 12 Oct 2011 17:52:09 -, Thor (Hammer of God) said: I know that if I was starving to death and couldn't afford medical care I know that maybe the time to be protesting isn't once you're already starving, but when the near-term outlook includes possibly starving as one of the possible

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 7:47 PM, Ivan . ivan...@gmail.com wrote: http://www.businessinsider.com/what-wall-street-protesters-are-so-angry-about-2011-10?op=1 Very nice. All the pictures make it very easy to take in quickly. It should help those who don't want to take a detailed look at the

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Ivan .
Welcome to Ameristan majority of street lights have been removed from one Michigan city that was having trouble paying its electricity bill http://12160.info/profiles/blogs/majority-of-street-lights-have-been-removed-from-one-michigan-cit Colorado empties popular lake to pay its water bill

Re: [Full-disclosure] Search and Seizure of Email

2011-10-12 Thread 夜神 岩男
Nicely put. Too bad folks in the other OT thread on this list (and around the world) don't feel the same way about economics -- and other things, like healthcare, for that matter... Its all about manning up and making yourself secure in whatever way that means to you, no matter how futile

[Full-disclosure] Cost of Hacks?

2011-10-12 Thread gillis jones
Hi Guys, First and foremost, apologies if you feel this is spam- don't mean to, just trying to harvest some knowledge... I am looking into the overall cost of a hack, trying to figure out what kind of actual costs are incurred by businesses when they are hacked, so a few things: 1. Do you

Re: [Full-disclosure] Cost of Hacks?

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 9:14 PM, gillis jones gilli...@gmail.com wrote: Hi Guys, First and foremost, apologies if you feel this is spam- don't mean to, just trying to harvest some knowledge... I am looking into the overall cost of a hack, trying to figure out what kind of actual costs are

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread 夜神 岩男
On 10/13/2011 08:53 AM, Jeffrey Walton wrote: On Wed, Oct 12, 2011 at 7:47 PM, Ivan .ivan...@gmail.com wrote: http://www.businessinsider.com/what-wall-street-protesters-are-so-angry-about-2011-10?op=1 Very nice. All the pictures make it very easy to take in quickly. It should help those

Re: [Full-disclosure] [OT] Obama said: American people understand that not everybody's been following the rules

2011-10-12 Thread Ivan .
do your own research, read your own shit, make your own decisions 2011/10/13 夜神 岩男 supergiantpot...@yahoo.co.jp On 10/13/2011 08:53 AM, Jeffrey Walton wrote: On Wed, Oct 12, 2011 at 7:47 PM, Ivan .ivan...@gmail.com wrote:

Re: [Full-disclosure] Snail mail vs. Email

2011-10-12 Thread Laurelai
On 10/12/2011 3:23 PM, Jeffrey Walton wrote: On Wed, Oct 12, 2011 at 4:09 PM, Laurelailaure...@oneechan.org wrote: On 10/12/2011 1:26 PM, Daniel Sichel wrote: Well there is no push to make snail-mail encrypted and lets face it most peoples mailboxes don't have any sort of locking mechanisms

Re: [Full-disclosure] [OT] the nigger said: American people understand that not everybody's been following the rules

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 8:12 PM, Ivan . ivan...@gmail.com wrote: Welcome to Ameristan I like to refer to it as The United States of Corporate America. majority of street lights have been removed from one Michigan city that was having trouble paying its electricity bill

Re: [Full-disclosure] Snail mail vs. Email

2011-10-12 Thread Jeffrey Walton
On Wed, Oct 12, 2011 at 10:49 PM, Laurelai laure...@oneechan.org wrote: On 10/12/2011 3:23 PM, Jeffrey Walton wrote: On Wed, Oct 12, 2011 at 4:09 PM, Laurelailaure...@oneechan.org  wrote: On 10/12/2011 1:26 PM, Daniel Sichel wrote: [SNIP] I work in the phone business and we have CALEA

[Full-disclosure] VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console

2011-10-12 Thread VMware Security Team
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - VMware Security Advisory Advisory ID: VMSA-2011-0012 Synopsis: VMware ESXi and ESX updates to third party libraries and