Re: [Full-disclosure] Student expelled from Montreal college after finding vulnerability that compromised security of 250, 000

2013-01-24 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tue, 22 Jan 2013 08:32:11 + Benji m...@b3nji.com wrote: Someone please explain to me why he had to run a vulnerability scanner to check one vulnerability, and again, how are we still arguing about this? Whether you think he had a 'right'

Re: [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-10 Thread Benjamin Kreuter
On Sat, 09 Jun 2012 15:08:24 -0400 valdis.kletni...@vt.edu wrote: (CALEA taps are *widely* exploited by the bad guys. Do you have a good citation for this? I do not doubt that it is the case, but it would be nice to point to a few statistics or even anecdotes about it. -- Ben -- Benjamin

Re: [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-10 Thread Benjamin Kreuter
On Sun, 10 Jun 2012 13:25:30 -0700 coderman coder...@gmail.com wrote: On Sun, Jun 10, 2012 at 9:42 AM, Benjamin Kreuter ben.kreu...@gmail.com wrote: ... (CALEA taps are *widely* exploited by the bad guys. Do you have a good citation for this? the most infamous case is the athens

Re: [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-10 Thread Benjamin Kreuter
On Sun, 10 Jun 2012 14:29:23 -0700 coderman coder...@gmail.com wrote: On Sun, Jun 10, 2012 at 2:22 PM, coderman coder...@gmail.com wrote: ... we can split hairs on the origin and naming of a given capability, but these are CALEA (aka lawful intercept) functions used unlawfully. more

Re: [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-10 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sun, 10 Jun 2012 17:06:37 -0400 Laurelai laure...@oneechan.org wrote: I am a bit surprised by the direction of this conversation and I have been waiting for someone to say the obvious in regards to protecting yourself from .gov malware, it

Re: [Full-disclosure] Obama Order Sped Up Wave of Cyberattacks Against Iran

2012-06-07 Thread Benjamin Kreuter
On Wed, 06 Jun 2012 18:08:01 -0400 valdis.kletni...@vt.edu wrote: On Wed, 06 Jun 2012 10:41:24 -0400, Laurelai said: People seem to think that since the US Gov did it that makes it ok, well I do not think it does. Especially when they throw kids with small botnets in jail for being mad

Re: [Full-disclosure] NSA Cyber security program [ maybe off-topic ]

2012-06-01 Thread Benjamin Kreuter
On Wed, 30 May 2012 23:51:09 +0200 Jann Horn jannh...@googlemail.com wrote: On Mon, May 28, 2012 at 08:06:42PM -0300, Pablo wrote: Interesting… http://www.nsa.gov/academia/nat_cae_cyber_ops/index.shtml

Re: [Full-disclosure] incorrect integer conversions in OpenSSL can result in memory corruption.

2012-04-19 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thu, 19 Apr 2012 12:35:22 +0200 Tavis Ormandy tav...@cmpxchg8b.com wrote: All versions of OpenSSL on all platforms up to and including version 1.0.1 are affected. [snip] BUF_MEM_grow_clean accepts a size_t, but the subroutine it uses to

Re: [Full-disclosure] when did piracy/theft become expression of freedom

2012-01-28 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Fri, 27 Jan 2012 19:02:09 -0800 Zach C. fxc...@gmail.com wrote: On Jan 27, 2012 4:07 PM, valdis.kletni...@vt.edu wrote: On Fri, 27 Jan 2012 18:06:28 GMT, Michael Schmidt said: You want to be very careful with that line of thought. You

Re: [Full-disclosure] when did piracy/theft become expression of freedom

2012-01-28 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sat, 28 Jan 2012 02:16:45 + Thor (Hammer of God) t...@hammerofgod.com wrote: -Original Message- From: full-disclosure-boun...@lists.grok.org.uk [mailto:full-disclosure- boun...@lists.grok.org.uk] On Behalf Of

Re: [Full-disclosure] when did piracy/theft become expression of freedom

2012-01-28 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sat, 28 Jan 2012 23:49:09 +0100 Christian Sciberras uuf6...@gmail.com wrote: That has always been viewed from the consumer perspective. Copyrights exist for consumers, at least according to the US constitution: The Congress shall have the

Re: [Full-disclosure] Full-Disclosure Digest, Vol 83, Issue 21

2012-01-17 Thread Benjamin Kreuter
On Tue, 17 Jan 2012 12:28:11 -0500 valdis.kletni...@vt.edu wrote: Basically, you use a flaw to extract secret info from a protected computer, and you aren't an authorized pen tester with a signed get out of jail free card from the owner of the computer, you just bought yourself a felony rap.

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-14 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sat, 14 Jan 2012 13:11:37 -0600 Paul Schmehl pschmehl_li...@tx.rr.com wrote: --On January 14, 2012 8:33:13 AM -0700 Sanguinarious Rose sanguiner...@occultusterra.com wrote: I've been watching this chat for a while and I have to say a lot

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-14 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Sat, 14 Jan 2012 14:33:23 -0700 Sanguinarious Rose sanguiner...@occultusterra.com wrote: On the kiddies, I can't see the advantage of hiring a professional sqlmap and havij operator. For a full-time position with benefits, no, there is no

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-13 Thread Benjamin Kreuter
On Thu, 12 Jan 2012 16:06:53 -0500 valdis.kletni...@vt.edu wrote: On Thu, 12 Jan 2012 15:16:19 EST, Benjamin Kreuter said: Really, calling it breaking in is a stretch. You connected a computer to a publicly accessible computer network, where anyone can send anything to your computer

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-13 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thu, 12 Jan 2012 23:36:29 + Giles Coochey gi...@coochey.net wrote: On 12/01/2012 23:30, Byron Sonne wrote: Hello, Bad analogy. Closer would be if you have a house that's got a driveway on a public street, and you claim it's not

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-13 Thread Benjamin Kreuter
On Fri, 13 Jan 2012 10:37:31 -0600 Paul Schmehl pschmehl_li...@tx.rr.com wrote: --On January 12, 2012 3:16:19 PM -0500 Benjamin Kreuter ben.kreu...@gmail.com wrote: The law is not going to stop the really bad people from attacking your system, nor is it going to stop them from profiting

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-13 Thread Benjamin Kreuter
On Fri, 13 Jan 2012 11:57:27 +0100 Ferenc Kovacs tyr...@gmail.com wrote: On Thu, Jan 12, 2012 at 10:46 PM, Benjamin Kreuter ben.kreu...@gmail.comwrote: On Thu, 12 Jan 2012 16:06:53 -0500 valdis.kletni...@vt.edu wrote: On Thu, 12 Jan 2012 15:16:19 EST, Benjamin Kreuter said

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-13 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Fri, 13 Jan 2012 15:17:07 -0600 Paul Schmehl pschmehl_li...@tx.rr.com wrote: --On January 13, 2012 2:03:36 PM -0600 Laurelai laure...@oneechan.org wrote: Well just remember they could have *not* told you and helped themselves to a

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-12 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Tue, 10 Jan 2012 21:39:07 -0800 Ian Hayes cthulhucall...@gmail.com wrote: On Tue, Jan 10, 2012 at 9:18 PM, Laurelai laure...@oneechan.org wrote: On 1/10/12 10:18 PM, Byron Sonne wrote: Don't piss off a talented adolescent with computer

Re: [Full-disclosure] Rate Stratfor's Incident Response

2012-01-12 Thread Benjamin Kreuter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On Thu, 12 Jan 2012 18:29:42 + Giles Coochey gi...@coochey.net wrote: On 12/01/2012 18:12, Laurelai wrote: My suggestion that they should hire these kids was meant to imply that as bad as they are they probably are more ethical than the