Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread xD 0x41
Andrew, please check all computers that you have used recently, as somebody has apparently compromised at least one account you use at Yahoo and is posting as you using your Yahoo credentials. I got this mail purportedly from you less than an hour later... hrm, although Andrew himself, seems to h

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Mike Hale
Obviously not. Again. They looked like they had weapons. The pilots weren't wondering...they were sure they saw weapons. They then engaged what appeared to be a clear threat to other US forces nearby. The pilots acted exactly as they should have, given the information presented to them. This

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Jeffrey Walton
On Fri, Oct 14, 2011 at 2:19 AM, Mike Hale wrote: > Except that they weren't obviously unarmed. > > Not only where they not obviously unarmed, they appeared to be armed. > > Look at the 4 minute mark. > > That sure as shit looks like an RPG. > > The crew thought the group was armed.  Ergo, they we

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Valdis . Kletnieks
On Thu, 13 Oct 2011 22:44:44 PDT, Mike Hale said: > Seriously! Think about the injustice of having American helicopters > engage armed individuals shadowing American soldiers. Shooting at "armed individuals" is one thing. If it's "civilians and Reuters employees" who *aren't* obviously armed, it

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Mike Hale
Seriously! Think about the injustice of having American helicopters engage armed individuals shadowing American soldiers. The inhumanity is heart breaking. Go troll somewhere else. On Thu, Oct 13, 2011 at 9:53 PM, Jeffrey Walton wrote: > On Fri, Oct 14, 2011 at 12:22 AM, Jeffrey Walton wrote:

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread Valdis . Kletnieks
On Thu, 13 Oct 2011 21:29:36 PDT, "andrew.wallace" said: > Infact, I've been one of the most upfront people in describing my role within > the security community. Andrew, please check all computers that you have used recently, as somebody has apparently compromised at least one account you use at

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Jeffrey Walton
On Fri, Oct 14, 2011 at 12:22 AM, Jeffrey Walton wrote: > On Thu, Oct 13, 2011 at 11:59 PM, Ivan . wrote: >> don't feed the trolls >> >> http://whatreallyhappened.com/ > Don't forget http://www.collateralmurder.com/. > > Its appalling the US pilots of the helicopter make a joke and laugh > when t

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Jeffrey Walton
On Thu, Oct 13, 2011 at 11:59 PM, Ivan . wrote: > don't feed the trolls > > http://whatreallyhappened.com/ Don't forget http://www.collateralmurder.com/. Its appalling the US pilots of the helicopter make a joke and laugh when they shoot the children ("they shouldn't have brought their kids to wo

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Ivan .
don't feed the trolls http://whatreallyhappened.com/ On Fri, Oct 14, 2011 at 2:53 PM, Laurelai wrote: > On 10/13/2011 7:11 PM, Christian Sciberras wrote: > > > So if they cause damage for profit that makes it ok? > > No. But it's certainly better than doing damage without profit. Making > pro

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Laurelai
On 10/13/2011 7:11 PM, Christian Sciberras wrote: > So if they cause damage for profit that makes it ok? No. But it's certainly better than doing damage without profit. Making profit means that at the end of the day, the money's going to go somewhere further in the chain. Flattening a tower, f

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread xD 0x41
Ah, i can see why now :) That is, against FD lists rules, and, as they say, can be *updated* every month if need be, for even ONE person. Also, i queried the amount of n3td3v posts, and found almost every one, he was VERY sarcastic and acting like he was king-of-the-kids,when, i think he isnt.. but

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread Valdis . Kletnieks
On Thu, 13 Oct 2011 17:51:24 PDT, "andrew.wallace" said: > I'm not moderated, I was completely brick walled. I rely on the industry to > post my stuff on my behalf. Let's see. "not moderated, completely brick walled". How well does that hold up? The note you replied to left the full-disclosure s

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread xD 0x41
You like that name ? lol... Forensic software ;) Its not malware! why would anyone think that, ebven comes with a pdf, what more would any buyer want ;p hehehe this is going to be a VERY interesting read :P cheers for that, xd On 14 October 2011 12:19, Ivan . wrote: > interesting > > *DigiTask

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread xD 0x41
Here , i would have doneso initially, but was not sure if / whatt you have done to maybe pissoff the bosses of the list :P So im doing this blindly, with faith in just the right to speech, and nothing more in mind. I hope i dont get 500 links of threads about you, or your posts, and i hope i dont s

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread Ivan .
interesting *DigiTask Remote Forensic Spyware * http://cryptome.org/0005/michaelthomas.pdf On Fri, Oct 14, 2011 at 11:38 AM, wrote: > On Thu, 13 Oct 2011 14:44:32 PDT, Andrew Wallace said: > > No, they started moderating the list January 2009. > > > > --- > > > > > > Andrew Wallace > > > > Ind

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread Valdis . Kletnieks
On Thu, 13 Oct 2011 14:44:32 PDT, Andrew Wallace said: > No, they started moderating the list January 2009. > > --- > > > Andrew Wallace > > Independent consultant > > www.n3td3v.org.uk > > > > > From: Byron Sonne > To: full-disclosure@lists.grok.org.uk > Sent: Thu

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Christian Sciberras
> So if they cause damage for profit that makes it ok? No. But it's certainly better than doing damage without profit. Making profit means that at the end of the day, the money's going to go somewhere further in the chain. Flattening a tower, for instance, or attacking the local bank that refused

[Full-disclosure] [ GLSA 201110-11 ] Adobe Flash Player: Multiple vulnerabilities

2011-10-13 Thread Tim Sammut
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201110-11 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - -

[Full-disclosure] [ GLSA 201110-10 ] Wget: User-assisted file creation or overwrite

2011-10-13 Thread Tim Sammut
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201110-10 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - -

Re: [Full-disclosure] Military: Computer Virus Wasn't Directed at Drones

2011-10-13 Thread Christian Sciberras
Here's another lesson *you* should learn; read what others say twice if you can't understand it the first time. I don't remember the focus of the discussion was on the malware per se, but more about questioning competence behind the responsible people. On Thu, Oct 13, 2011 at 11:02 PM, andre

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread Jeffrey Walton
On Thu, Oct 13, 2011 at 5:33 PM, Byron Sonne wrote: > I thought this was an unmoderated list? It appears my submission has > been held back. I had a few problems myself. When I asked the admin if the server was having problems, he stated it was expected behavior. When I asked how 'recipient addres

[Full-disclosure] [ GLSA 201110-09 ] Conky: Privilege escalation

2011-10-13 Thread Stefan Behte
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201110-09 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - -

Re: [Full-disclosure] Possible German Governmental Backdoor found ("R2D2")

2011-10-13 Thread Byron Sonne
I thought this was an unmoderated list? It appears my submission has been held back. >> Interesting... although that archive seems corrupt... id like to see abit >> more about this but, very interesting indeed.. specially skype id >> harvesting, what could this be for. > I hope that was a sarcas

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Laurelai
On 10/13/2011 9:18 AM, Christian Sciberras wrote: I simply acknowledge the fact that some people work hard to get "obscenely rich", but I just can't stand people that cause damage for the fun of it. So if they cause damage for profit that makes it ok? Yes, I stick for everyone that minds his

[Full-disclosure] [ GLSA 201110-08 ] feh: Multiple vulnerabilities

2011-10-13 Thread Stefan Behte
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 201110-08 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - -

Re: [Full-disclosure] Full-Disclosure Digest, Vol 80, Issue 54

2011-10-13 Thread Mikhail A. Utin
x27;t own a > >>>>> semi decent camera? > >>>>> > >>>>> Its not a right but a privilege to own a nice camera, now. > >>>>> > >>>>> > >>>

Re: [Full-disclosure] Snail mail vs. Email

2011-10-13 Thread Kurt Buff
On Wed, Oct 12, 2011 at 22:11, Jeffrey Walton wrote: > Sparta, as one of the first democracies, had it right. They put the > public officials on trial when their term expired because they knew > what Class A fuck-ups they were. Its funny how that lesson was lost to > history. > > Jeff Sparta in t

Re: [Full-disclosure] [OT] the nigger said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Thor (Hammer of God)
> > Colorado empties popular lake to pay its water bill > > > http://www.telegraph.co.uk/news/worldnews/northamerica/usa/8816656/ > Col > > orado-empties-popular-lake-to-pay-its-water-bill.html > > > > and so on. Your tax $$$ go to bailouts > > > > > > Are these links true? > > Things might be wo

Re: [Full-disclosure] [OT] the nigger said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Georgi Guninski
On Thu, Oct 13, 2011 at 11:12:49AM +1100, Ivan . wrote: > Welcome to Ameristan > > majority of street lights have been removed from one Michigan city that was > having trouble paying its electricity bill > http://12160.info/profiles/blogs/majority-of-street-lights-have-been-removed-from-one-michig

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Paul Schmehl
Well, you've certainly got all the lefty cliches memorized. The point is, while the stupid people's anger is directed at the rich, the government is the reason the rich are so prosperous. When you allow the government to pick winners and losers, the rich will always prosper and the rest of us

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Christian Sciberras
I simply acknowledge the fact that some people work hard to get "obscenely rich", but I just can't stand people that cause damage for the fun of it. Yes, I stick for everyone that minds his business, instead of ruining others' for the fun of it. What bothers me is the fact that those hypocrites (

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Laurelai
On 10/13/2011 1:29 AM, Christian Sciberras wrote: So, if in practice the 99% enjoy privileges a notch less than the 1%, where did the 99% go to? On Wed, Oct 12, 2011 at 7:52 PM, Thor (Hammer of God) mailto:t...@hammerofgod.com>> wrote: I know that if I was starving to death and coul

[Full-disclosure] SEC Consult SA-20111012-0 :: Client-side remote file upload & command execution in Microsoft Forefront UAG Remote Access Agent (CVE-2011-1969)

2011-10-13 Thread SEC Consult Vulnerability Lab
SEC Consult Vulnerability Lab Security Advisory < 20111012-0 > === title: Client-side remote file upload & command execution product: Microsoft Forefront Unified Access Gateway Remote

[Full-disclosure] Security regarding PHP's default session handling

2011-10-13 Thread Mango
Hi List. I've done a few writeups on local security concerns regarding PHP's default session handling, that I thought might interest you. There are some new research bundled with a lot of old information which I've compiled together with technical informative descriptions and POC exploit code. L

[Full-disclosure] Security-Assessment.com Advisory: Destination Search Admin Console Access Control Bypass

2011-10-13 Thread Drew Calcott
(, ) (, . `.' ) ('.', ). , ('. ( ) ( (_,) .`), ) _ _, / _/ / _ \ _ \ \==/ /_\ \ _/ ___\/ _ \ / \ / \/ |\\ \__( <_> ) Y Y \ /__ /\___|__ / \___ >/|__|_| / \/\/.-. \/\/:wq

[Full-disclosure] Two Remote Code Execution Vulnerabilities in Internet Explorer

2011-10-13 Thread Ivan Fratric
### Vulnerability 1: Internet Explorer Select Element Remote Code Execution ### Original advisory: http://ifsec.blogspot.com/2011/10/internet-explorer-select-elem

Re: [Full-disclosure] [OT] Obama said: "American people understand that not everybody's been following the rules"

2011-10-13 Thread Bob Dobbs
On Wed, Oct 12, 2011 at 3:45 PM, Zach C. wrote: > And I don't think I'll let the threat of "being a hypocrite" stop me from > saying Apple sucks balls just because I own and no longer use an iPhone. > Lots of people are practically forced to use Windows even though they believe it sucks. I can e

[Full-disclosure] Advisory posted on Mac OS X and Safari (File theft, code execution, etc)

2011-10-13 Thread 1tuhav
Hello F-D, I published details on some security holes in Apple products today, but heres the condensed version: 1. Launch local files URLs from Safari on Mac OS X by doing the following: BASE HREF=file:// and document.location=/path/to/run 2. safar-extension:// URLs have a directory trave