[Full-disclosure] [SECURITY] [DSA 2520-1] openoffice.org security update

2012-08-02 Thread Yves-Alexis Perez
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 - - Debian Security Advisory DSA-2520-1 secur...@debian.org http://www.debian.org/security/ Yves-Alexis Perez August 01, 2012

[Full-disclosure] sandboxed browsing

2012-08-02 Thread Robert Kim App and Facebook Marketing
WOW... I'm going to have to quote you guys and blog this! Another good suggestion that came off-list, for inspection of suspicious > links and sites: staged browsing using burpsuite to MitM your own browsing, > and inspect responses prior to rendering in the browser. > -- Robert Kim Blog / Soc

Re: [Full-disclosure] [ MDVSA-2012:122 ] icedtea-web

2012-08-02 Thread Robert Kim App and Facebook Marketing
> > What browsers are effected? > > IcedTea-Web browser plugin pass invalid pointer to a web browser. > Depending on the browser used, it may cause the browser to crash or > possibly execute arbitrary code (CVE-2012-3422). -- Robert Kim Social Media Management NYC and LA http://www.youtube.

[Full-disclosure] [ MDVSA-2012:122 ] icedtea-web

2012-08-02 Thread security
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ___ Mandriva Linux Security Advisory MDVSA-2012:122 http://www.mandriva.com/security/ _

Re: [Full-disclosure] nvidia linux binary driver priv escalation exploit

2012-08-02 Thread Dave Airlie
> > what is your system? it doesn't work for my opensuse 12.1 (kernel > 3.1.10-1.9-desktop, arch x86_64) with nvidia driver version 295.20. > maybe this will give you some more info (i'm not goot at C at all), here is > the output (i've commented 'if (getuid()) {' stuff and dump_gate function): Ye

Re: [Full-disclosure] OT: OSX-PHP Dev Enviornment

2012-08-02 Thread Kurt Ellzey
Several years ago I was working in PHP regularly and trying to find something similar to what you're looking for now. Given that up to this point I had been using notepad exclusively (don't ask), anything was a step up. There is an add in for Visual Studio called VS.php which does a fairly good jo

Re: [Full-disclosure] OT: OSX-PHP Dev Enviornment

2012-08-02 Thread Ulisses Montenegro
I'm not a big fan of IDEs for dynamically typed languages, but if I had to choose one I'd go with Komodo: http://www.activestate.com/komodo-ide/features It's multiplatform (don't know about how licenses work when using it across platforms), reasonably fast and offers lots of extra goodies aside f

[Full-disclosure] sandboxed browsing

2012-08-02 Thread Kyle Creyts
Another good suggestion that came off-list, for inspection of suspicious links and sites: staged browsing using burpsuite to MitM your own browsing, and inspect responses prior to rendering in the browser. On Aug 1, 2012 11:20 AM, "bk" wrote: > > On Jul 31, 2012, at 4:38 PM, Kyle Creyts wrote: >

Re: [Full-disclosure] hacking FB Ads

2012-08-02 Thread You Got Pwned
This is interesting! Can you please post some logs (User Agent/ IPs)? Cheers 2012/8/2 Ivan .Heca > interesting bit of research > > “A couple months ago, when we were preparing to launch the new Limited > Run, we started to experiment with Facebook ads. Unfortunately, while > testing their ad sy

[Full-disclosure] e-commerce websites and password management...

2012-08-02 Thread n0sec
...they still amaze me. http://pastebin.com/EsAkz8Cb -- peace. ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] OT: OSX-PHP Dev Enviornment

2012-08-02 Thread Feighen Oosterbroek
Hey I've been using eclipse with pdt for a good few years now. Only real gripe I have with it is it is rather heavy. Load time can be quite long. Regards Feighen On 1 August 2012 21:29, Thor wrote: > Yep, I've got VS Ultimate and all the bells and whistles - but I'm > operating strictly within

Re: [Full-disclosure] sandboxed browsing

2012-08-02 Thread Giovanni [dacav] Simoni
First of all: hello to everyone (this is the first time I'm writing)! On Wed, Aug 01, 2012 at 11:20:06AM -0700, bk wrote: > For practical surfing of suspect content, Firefox in a VM with NoScript, > running through Privoxy & Tor (don't forget to configure Firefox to send > DNS requests through Tor

Re: [Full-disclosure] OT: OSX-PHP Dev Enviornment

2012-08-02 Thread Michael D. Wood
Thor, I like to use Coda - check it out. https://panic.com/coda/ -Original Message- From: full-disclosure-boun...@lists.grok.org.uk [mailto:full-disclosure-boun...@lists.grok.org.uk] On Behalf Of Thor Sent: Wednesday, August 01, 2012 2:58 PM To: full-disclosure@lists.grok.org.uk Subject:

[Full-disclosure] Kaspersky Password Manager 5.0.0.164 - Software Filter Vulnerability

2012-08-02 Thread Vulnerability Lab
Title: == Kaspersky PM 5.0.0.164 - Software Filter Vulnerability Date: = 2012-07-12 References: === http://www.vulnerability-lab.com/get_content.php?id=612 VL-ID: = 612 Common Vulnerability Scoring System: 3 Introduction: ==

Re: [Full-disclosure] OT: OSX-PHP Dev Enviornment

2012-08-02 Thread Kelvin White
emacs... learn it! On Wed, Aug 1, 2012 at 3:27 PM, Thor wrote: > That looks quite cool as well! Zend has had a few recommendations too. > But so has PHPStorm. I like the looks of it, actually. > > This is why I ask the community as opposed to doing too much Goosearch. > Much better feedbac

[Full-disclosure] [SECURITY] [DSA 2519-1] isc-dhcp security update

2012-08-02 Thread Nico Golde
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - - Debian Security Advisory DSA-2519-1 secur...@debian.org http://www.debian.org/security/Nico Golde August 1, 2012