Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread Thor (Hammer of God)
I replied all; the statement was to Guninski alone. Even if I didn't this is a mailing list and grammar or spelling don't matter. Note I won't mention your use of "proffering." Regardless, let's see if I understand you. You are saying one should not agree with someone who ascribes behavioral (o

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread paul . szabo
Dear Mikhail, >> From: "Thor (Hammer of God)" >> To: Georgi Guninski , Stefan Kanthak >> >> Cc: "full-disclosure@lists.grok.org.uk" >> >> >> I'm not contradicting myself at all - in fact, *you* are the exact type of >> person I'm talking about. You couldn't give a rat's ass about th

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Justin Klein Keane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, My point about Maslow had to do with self actualization as a motivating factor. Freud also called used the super ego. It was meant to be demonstrative rather than illustrative, however. I believe there are people out there motivated by more

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Gary E. Miller
Yo Григорий! On Tue, 10 Jul 2012 17:15:37 -0400 Григорий Братислава wrote: > >> People do not disclose their research to make > >> the world a better place. They do it for recognition or for money. > > > > I would argue there is a 3rd reason. Self defense. I and others > > have had issues of

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Григорий Братислава
On Tue, Jul 10, 2012 at 4:37 PM, Gary E. Miller wrote: > Yo Thor! > > On Tue, 10 Jul 2012 19:58:16 + > "Thor (Hammer of God)" wrote: > >> People do not disclose their research to make >> the world a better place. They do it for recognition or for money. > > I would argue there is a 3rd reaso

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Gary E. Miller
Yo Thor! On Tue, 10 Jul 2012 19:58:16 + "Thor (Hammer of God)" wrote: > People do not disclose their research to make > the world a better place. They do it for recognition or for money. I would argue there is a 3rd reason. Self defense. I and others have had issues of our servers being

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Григорий Братислава
On is serious note concerning "disclosure," people need to is get a dose of reality. When I discover a bug on my own is time, I choose what to do with it. It is my time and effort. I am is obligated to do what I want and feel is relevant to myself. Not some is big corporation who cares little. So m

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread Григорий Братислава
Arizona is place for Witness Protection. Perhaps is maybe that Sabu is now in Arizona. Nebraska is state for cousinly love and is drink. Also corn. On Tue, Jul 10, 2012 at 3:48 PM, wrote: > On Tue, 10 Jul 2012 15:16:39 -0400, Григорий Братислава said: >> I reply to you is back "on-list." Inform

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Thor (Hammer of God)
"Moral obligation" to disclosing bugs? Really? The statement wasn't about what happens when there is disclosure or the effect it has - the statement was in regard to the purpose one does the research and subsequent disclosure in the first place. It is, quite simply, to be recognized. I didn't s

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread valdis . kletnieks
On Tue, 10 Jul 2012 15:16:39 -0400, Григорий Братислава said: > I reply to you is back "on-list." Information is for meant to be free. > And so you know, is no, your English is improper: The longer this thread goes on, the more I become convinced that one of these guys actually l

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread rancor
<3 On Jul 10, 2012 9:17 PM, "Григорий Братислава" wrote: > I reply to you is back "on-list." Information is for meant to be free. > And so you know, is no, your English is improper: > > You say: "People do not need seeing your arguments" > > Is correct: "People do not need to READ your comments"

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread Григорий Братислава
I reply to you is back "on-list." Information is for meant to be free. And so you know, is no, your English is improper: You say: "People do not need seeing your arguments" Is correct: "People do not need to READ your comments" Or: "People should not read your comments" Or: "People don't want t

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread Григорий Братислава
On Tue, Jul 10, 2012 at 2:50 PM, Mikhail A. Utin wrote: > Hey you, > I do what I want to do and support who I want supporting. > If you did not get the idea, it is not my fault. Read again, if you can. > > M Is you misspell "who I want supporting" you is mean to say "who I want to support" is pro

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread Григорий Братислава
You must is speak for yourself. I is stopped using Linux once Debian is give away root ownership many is times! From now on I is only use the best. BeOS. Is because Theo also have backdoor. On Tue, Jul 10, 2012 at 11:42 AM, Mikhail A. Utin wrote: > Hello, > I completely agree with Thor. We have t

Re: [Full-disclosure] How much time is appropriate for fixing

2012-07-10 Thread Justin Klein Keane
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I feel compelled to point out that disclosing a bug *is* contributing. It requires a lot of time and effort to find a bug, which is a contribution to the target software, even if only seen as free quality assurance work. Disclosure is unden

Re: [Full-disclosure] Full-Disclosure Digest, Vol 89, Issue 11: ] How much time is appropriate for fixing

2012-07-10 Thread Mikhail A. Utin
Hello, I completely agree with Thor. We have to do something for free. We have to contribute, not just use. Whoever and whatever. Examples: - This list is ran for free (hardware, software, time, energy are used for) and giving us a chance to communicate - The most of us use Linux, whichever flav

[Full-disclosure] [CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability

2012-07-10 Thread Aaron T. Myers
Sender: a...@cloudera.com Subject: [CVE-2012-3376] Apache Hadoop HDFS information disclosure vulnerability Message-Id: Recipient: jason.lo...@rga.com --- Begin Message --- -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, Users of Apache Hadoop should be aware of a security vulnerability rece

[Full-disclosure] Drupal Book Block Module V.6.x-1.0-beta1 XSS Vulnerability

2012-07-10 Thread Zach Alexander
Hello all, I have discovered an XSS vulnerability in Drupal's Book Block module. The Drupal Book Block module (https://drupal.org/project/bookblock) allows users to create a block on their page that can generate an individual menu block for each of a site's books. The Book Block module contains a