Re: [Full-disclosure] Save XP

2008-01-31 Thread Dude VanWinkle
On Jan 28, 2008 3:43 PM, scott [EMAIL PROTECTED] wrote: For all those who believe Vista is still not up to par,you can help stop MS from forcing us to go to Vista. For those who don't know,MS is planning on stopping XP sales after June 30,2008.There are a few options for enterprise users,but

Re: [Full-disclosure] back to high value targets

2008-01-31 Thread Dude VanWinkle
On Jan 31, 2008 3:51 PM, gmaggro [EMAIL PROTECTED] wrote: One planned for Egypt-France is 8 pair, each pair doing 128 lambdas at 10Gbit per lambda. Do the math. That's a lot of retards And they dont have to upgrade the fiber in order to upgrade the bandwidth. They use the same fiber and

Re: [Full-disclosure] Metasploit Framework v3.1 Released

2008-01-28 Thread Dude VanWinkle
On Jan 28, 2008 11:50 AM, worried security [EMAIL PROTECTED] wrote: On Jan 28, 2008 5:32 AM, H D Moore [EMAIL PROTECTED] wrote: The latest version of the Metasploit Framework, as well as screen shots, video demonstrations, documentation and installation instructions for many platforms, can

Re: [Full-disclosure] Project Chanology

2008-01-26 Thread Dude VanWinkle
On Jan 26, 2008 10:55 AM, gmaggro [EMAIL PROTECTED] wrote: Dismantling Chanology infrastructure Yes n3td3v, let us know how you manage to dismantle Usenet while you're at it. Don't fuck with n3td3v man, she might just sign you up to her google group if you keep messing with her. Thats

Re: [Full-disclosure] [Professional IT Security Providers - Exposed] PlanNetGroup ( F )

2008-01-25 Thread Dude VanWinkle
On Jan 24, 2008 4:37 PM, [EMAIL PROTECTED] wrote: On Thu, 24 Jan 2008 16:07:42 EST, Dude VanWinkle said: On Jan 24, 2008 3:54 PM, [EMAIL PROTECTED] wrote: On Thu, 24 Jan 2008 15:18:10 EST, Dude VanWinkle said: OK, 10 points to the person who deciphers this one: ... 7E7E

Re: [Full-disclosure] [Professional IT Security Providers - Exposed] PlanNetGroup ( F )

2008-01-25 Thread Dude VanWinkle
On Jan 25, 2008 10:04 AM, Nate McFeters [EMAIL PROTECTED] wrote: This is the best thread on FD ever, starts with secreview making a completely unprofessional/mostly uninformed assessment of a consulting group, moved into some question of secreview and why they think they can do this, and here

Re: [Full-disclosure] [Professional IT Security Providers - Exposed] PlanNetGroup ( F )

2008-01-24 Thread Dude VanWinkle
OK, 10 points to the person who deciphers this one: E5F2C6F68595E5A6D7A8C2C4E8E6F48785E6F9F1C9C7D993E8F293A681C7E5A8C9C7F1F5C9C7C6A9E8F29397C9C8D9A5C9C7D18883F2E4F2D5C3C2938294D5A5E9C7E592C9C8D9A5C9C7E592E8F2D997E8A8C2F0E9E788F0D7A8C2D1C9C8D99682F3E59581C8D8878294F9F0C9D87E7E -JP

Re: [Full-disclosure] Was secreview crap - now OpenVMS!!

2008-01-04 Thread Dude VanWinkle
On Jan 2, 2008 2:48 PM, reepex [EMAIL PROTECTED] wrote: sure signs of someone washed up as evident by your non-productiveness in the last few years ( and no - spamming mailing lists does not count ) Gee, I would think that setting up an emergency alert system (pager, Phone, CCtv, SMTP, etc)

Re: [Full-disclosure] [Professional IT Security Providers - Exposed] Cybertrust ( C + )

2007-12-20 Thread Dude VanWinkle
On Dec 20, 2007 6:35 PM, don bailey [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 reepex wrote: nothing don ever does is useful or funny On Dec 20, 2007 2:14 PM, SecReview [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Don, the origional poster is

Re: [Full-disclosure] Fwd: Websense 6.3.1 Filtering Bypass

2007-12-13 Thread Dude VanWinkle
On Dec 13, 2007 1:45 PM, reepex [EMAIL PROTECTED] wrote: automatic updates with notification? Silent patching? Microsoft tactics? I also knew websense was a joke but now you have come to this? Whats next? AV companies automatically updating without your permission? Websense adding new sites to

Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability

2007-12-12 Thread Dude VanWinkle
On Dec 12, 2007 3:38 AM, Morning Wood [EMAIL PROTECTED] wrote: One of my first advisories and was rediscovered later, turned into a viable exploit 2 years after by another researcher. http://framework.metasploit.com/exploits/view/?refname=windows:ftp:netterm_netftpd_user

Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability

2007-12-12 Thread Dude VanWinkle
On Dec 12, 2007 10:32 PM, Fredrick Diggle [EMAIL PROTECTED] wrote: also Dude, your pillow joke was damn hilarious :D how did you think of it? can you give me joke lessons? No, but I can give you some pointers on sarcasm.. ;-) -JP ___

Re: [Full-disclosure] Microsoft FTP Client Multiple Bufferoverflow Vulnerability

2007-12-12 Thread Dude VanWinkle
will stuff a pillow in there in order to help curb the urge to give n3td3v repeated blowjobs on the hour, every hour.. ^--- Comedy Platinum (better than gold) YAY! On Dec 12, 2007 8:38 PM, Dude VanWinkle [EMAIL PROTECTED] wrote: On Dec 12, 2007 3:38 AM, Morning Wood [EMAIL PROTECTED

Re: [Full-disclosure] Anyone have a reason for 2x the email flow today?

2007-12-05 Thread Dude VanWinkle
On Dec 4, 2007 8:27 AM, Maloney, Michael [EMAIL PROTECTED] wrote: I've noticed a 30K increase per day in traffic.. I was finally able to do the numbers: We do 1,000,000 emails a day We did 1.3 million that day.. Something must have happened... -JP

Re: [Full-disclosure] Anyone have a reason for 2x the email flow today?

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 6:47 PM, Jay Dephallia [EMAIL PROTECTED] wrote: Its not spam email. You can seriously make yourself bigger with this pill. [EMAIL PROTECTED] has all the info. Just email him about it. Also, ask him about the size of his cock. What a surprise you use a gmail account to send

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 5:44 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 20:04:42 EST, Dude VanWinkle said: Anyone who was a security expert 30 yrs ago should be ridiculed. Their job description was I inspect all 5 1/4 disks that get mailed to us and should be a reason NOT to hire them :-P

Re: [Full-disclosure] Anyone have a reason for 2x the email flow today?

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 10:06 PM, Bob Bruen [EMAIL PROTECTED] wrote: On Wed, 5 Dec 2007, Dude VanWinkle wrote: On Dec 5, 2007 6:47 PM, Jay Dephallia [EMAIL PROTECTED] wrote: Its not spam email. You can seriously make yourself bigger with this pill. [EMAIL PROTECTED] has all the info. Just email him

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 11:10 PM, [EMAIL PROTECTED] wrote: On Wed, 05 Dec 2007 22:45:39 EST, Dude VanWinkle said: You are right, thanks for all the careful planning and well thought out infrastructure. I mean, who could have thought that the ability to reach into the homes of every tom dick

Re: [Full-disclosure] Professional IT Security Service Providers - Exposed

2007-12-05 Thread Dude VanWinkle
On Dec 5, 2007 6:02 PM, [EMAIL PROTECTED] wrote: On Tue, 04 Dec 2007 16:02:26 EST, [EMAIL PROTECTED] said: Generally our reviews are done by reading the contents of the companies website. We strip away all the marketing fluff and we look for untruths, poor grammar, quality of service,

Re: [Full-disclosure] need help in managing administrators

2007-12-05 Thread Dude VanWinkle
On Dec 6, 2007 1:12 AM, [EMAIL PROTECTED] wrote: On Wed, 05 Dec 2007 23:57:19 EST, Dude VanWinkle said: try this hey boss, you will cause regulation, expose national secrets to commies, Umm.. hate to break it to you, but the design was for an *open* research network. If you said you'd

Re: [Full-disclosure] need help in managing administrators

2007-12-03 Thread Dude VanWinkle
On Dec 2, 2007 8:46 PM, T Biehn [EMAIL PROTECTED] wrote: Wonderous suggestion Dude. Apparently someone can't spot obvious sarcasm. I do have a deficiency in that area.. or are you being sarcastic again? ___ Full-Disclosure - We believe in it.

Re: [Full-disclosure] SCADA refresher

2007-12-03 Thread Dude VanWinkle
Also Johnson Controls in 2005 they were busy converting the proprietary BACnet speaking SCADA devices to embedded windows XP, considering NASA and friends run JCI, and there is no good way to update embedded XP (AFAIK) remotely, these systems should be prime targets... Whats an MLP? -JP On Dec

[Full-disclosure] Anyone have a reason for 2x the email flow today?

2007-12-03 Thread Dude VanWinkle
My servers are slammed... Anyone else notice anything? -JP ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/

Re: [Full-disclosure] Anyone have a reason for 2x the email flow today?

2007-12-03 Thread Dude VanWinkle
On Dec 3, 2007 7:45 PM, [EMAIL PROTECTED] wrote: Not much other than the weather outside is frightful, but inside it's so delightful. :D Geoff Sent from my BlackBerry wireless handheld. I guess its more complexity than volume... damn spam..

Re: [Full-disclosure] need help in managing administrators

2007-12-02 Thread Dude VanWinkle
On Dec 2, 2007 4:04 PM, [EMAIL PROTECTED] wrote: On Sun, 02 Dec 2007 15:32:22 EST, T Biehn said: Clearly stated, he was cleaning up DOMAIN Administrators, which can, you know, Administer all the computers on the domain. What, you don't think that some people are unfortunate enough to be

Re: [Full-disclosure] Microsoft FTP Client Multiple

2007-11-29 Thread Dude VanWinkle
On Nov 29, 2007 12:11 PM, [EMAIL PROTECTED] wrote: On Wed, 28 Nov 2007 21:44:40 PST, Daniel H. Renner said: From what I've noticed, users of MS' FTP client aren't the usual Windows GUI user. So that would be one good social engineering trick... I wouldn't be surprised if a large

Re: [Full-disclosure] How to become a Computer Security Professional ?

2007-11-18 Thread Dude VanWinkle
On Nov 17, 2007 8:08 AM, Meef [EMAIL PROTECTED] wrote: What are the steps to follow to become a computer security professional ?, Read all the phrack magazines, starting with #40 or later. Learning ASM, Hex Math, C, Binary math, C++ can't hurt. Study AJAX/XML/WebDAV/.Net/Java, web 2.0 is the

Re: [Full-disclosure] mac trojan in-the-wild

2007-11-05 Thread Dude VanWinkle
they are tied to encryption software as for the full disk encryption: You got me there. That will protect you -JP On Nov 2, 2007 3:51 PM, Dude VanWinkle [EMAIL PROTECTED] wrote: On 11/2/07, J. Oquendo [EMAIL PROTECTED] wrote: Dude VanWinkle wrote: A program installed under false

Re: [Full-disclosure] stop cross posting

2007-11-04 Thread Dude VanWinkle
On 11/4/07, reepex [EMAIL PROTECTED] wrote: actually no one cares about your posts so it would be better if you stopped posting completely when you learn to install gcc you can come back sudo apt-get install gcc Sweet! I am back! BTW: Nice Profile: http://tinyurl.com/create.php BTW2: Did

Re: [Full-disclosure] on xss and its technical merit

2007-11-04 Thread Dude VanWinkle
On 11/4/07, reepex [EMAIL PROTECTED] wrote: On Nov 4, 2007 3:13 PM, pdp (architect) [EMAIL PROTECTED] wrote: This is not very offline. So you are taking peoples offline conversations and posting them against their wishes? Are you trying to make a name for yourself by saying look this

Re: [Full-disclosure] stop cross posting

2007-11-03 Thread Dude VanWinkle
On 11/3/07, worried security [EMAIL PROTECTED] wrote: hi, can everyone stop cross posting? its the same people on all the mailing lists, there is absolutely no reason for cross posting. Sorry about that n3td3v, won't happen again. I would hate to annoy you like that. -JP

Re: [Full-disclosure] IDS logs showing outgoing packets on port 80

2007-11-03 Thread Dude VanWinkle
On 11/3/07, Kelly Robinson [EMAIL PROTECTED] wrote: In our IDS logs, I notice many outgoing packets coming from port 80 (HTTP). These packets are coming from client PCs. What may be happening? If they are replies to an incoming packet, then they are running a web server. If they are not

Re: [Full-disclosure] mac trojan in-the-wild

2007-11-02 Thread Dude VanWinkle
On 11/1/07, nnp [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm not sure if you accidentally quoted my reply or not there, because if you did you're completely missing my point. My issue is with the format and content (or lack thereof) of the first post, I don't

Re: [Full-disclosure] mac trojan in-the-wild

2007-11-02 Thread Dude VanWinkle
On 11/2/07, J. Oquendo [EMAIL PROTECTED] wrote: Dude VanWinkle wrote: A program installed under false pretenses that will give the author/distributer remote access to the victim machines. Right... Guess those local are not a threat. ?? Local to the machine?? all prevention methods fail

Re: [Full-disclosure] mac trojan in-the-wild

2007-11-01 Thread Dude VanWinkle
On 11/1/07, nnp [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 There's a difference between ignoring something and making a statement like 'OS X is the new Windows 98.' OK How about iPhone is the new Win9x? It is running a type of OSX, one that is configured to use

Re: [Full-disclosure] Flash that simulates virus scan

2007-10-31 Thread Dude VanWinkle
On 10/31/07, Joshua Tagnore [EMAIL PROTECTED] wrote: List, Some time ago I remember that someone posted a PoC of a small site that had a really nice looking flash animation that performed a virus scan and after the virus scan was finished, the user was prompted for a Download virus fix?

Re: [Full-disclosure] spammer wades into US Presidential race

2007-10-30 Thread Dude VanWinkle
On 10/29/07, Leif Ericksen [EMAIL PROTECTED] wrote: Either way they are doing it to advance their own agenda. bottom line that is what their lack of action is all about. Their own agenda. I think his agenda was to make the guys who support the war actually go on record as supporting the war,

Re: [Full-disclosure] Fwd: Experience masturbation like never before.

2007-10-16 Thread Dude VanWinkle
Those are some pretty good faked headers guys (except for the hushmail part) FYI: No one will notice the difference if you spoof my addy, 'cause I have been filtered for years! -JP On 10/16/07, Dude VanVinkle [EMAIL PROTECTED] wrote: Someone on FD works for Yambo Financials. lulz - JP. On

Re: [Full-disclosure] [EMAIL PROTECTED]

2007-10-14 Thread Dude VanWinkle
On 10/14/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 http://gcc.gnu.org/ml/gcc-help/2006-05/msg00267.html Oh yeah? two can play that game: http://www.forbiddenweb.org/topic/10084/index.html -JP

Re: [Full-disclosure] [EMAIL PROTECTED]

2007-10-13 Thread Dude VanWinkle
On 10/13/07, worried security [EMAIL PROTECTED] wrote: On 10/13/07, Richard Golodner [EMAIL PROTECTED] wrote: Why don't you keep this offline between you and full-disclosure? I know Valdis and he does not give a damn about any of this sophomoric stuff. When you post legitimate

Re: [Full-disclosure] [EMAIL PROTECTED]

2007-10-13 Thread Dude VanWinkle
On 10/13/07, Dude VanWinkle [EMAIL PROTECTED] wrote: On 10/13/07, worried security [EMAIL PROTECTED] wrote: On 10/13/07, Richard Golodner [EMAIL PROTECTED] wrote: Why don't you keep this offline between you and full-disclosure? I know Valdis and he does not give a damn about any

Re: [Full-disclosure] Core Impact 7.5 Web App pen-testing framework, as good as the hype?

2007-10-09 Thread Dude VanWinkle
Sorry, I didnt mean to go over your head. I will dumb it down for you next time. -JP On 10/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mad technical! On Sun, 07 Oct 2007 19:55:24 -0400 Dude VanWinkle [EMAIL PROTECTED] wrote: On 10/7/07

Re: [Full-disclosure] Core Impact 7.5 Web App pen-testing framework, as good as the hype?

2007-10-09 Thread Dude VanWinkle
On 10/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Note: This signature can be verified at https://www.hushtools.com/verify Charset: UTF8 Version: Hush 2.5 What do you mean? well I was just wondering if I could verify you are a s00per l337

Re: [Full-disclosure] If internet goes down out of hours, we're screwed

2007-10-09 Thread Dude VanWinkle
I didn't read that book you sent in response to an offhanded remark, but I am impressed you learned about paragraphs! Now, lets focus on capital letters. -JPwho doesn't want to strain netdev with punctuation just yet, not to mention logic and brevity On 10/9/07, worried security [EMAIL

Re: [Full-disclosure] If internet goes down out of hours, we're screwed

2007-10-09 Thread Dude VanWinkle
On 10/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 You also missed an apostrophe in this post. On Tue, 09 Oct 2007 22:06:47 -0400 Dude VanWinkle [EMAIL PROTECTED] wrote: to worried security [EMAIL PROTECTED] Man, netdev, you are really

Re: [Full-disclosure] Core Impact 7.5 Web App pen-testing framework, as good as the hype?

2007-10-09 Thread Dude VanWinkle
On 10/9/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE-ww.hushtools.com/verify Charset: UTF8 Version: Hush 2.5 So iz yer new [EMAIL PROTECTED] handl3 UTF8 or Hush 2.5? -JPthe easily confused ___ Full-Disclosure -

Re: [Full-disclosure] Recall: UNSUBSCRIBE

2007-10-08 Thread Dude VanWinkle
On 10/8/07, Jones, Jeff (Enterprise Security) [EMAIL PROTECTED] wrote: Jones, Jeff (Enterprise Security) would like to recall the message, UNSUBSCRIBE. LOL, OK \ FYI: you cant recall messages that arent on your exchange organization -JP ___

Re: [Full-disclosure] Core Impact 7.5 Web App pen-testing framework, as good as the hype?

2007-10-06 Thread Dude VanWinkle
On 10/5/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 dunno dude you're the one who types all the asinine shit all the time in such smug fashions... and what picture did you forget the attachment or something Dude, having arguments with

Re: [Full-disclosure] Testing DidTheyReadIt.com

2007-10-01 Thread Dude VanWinkle
On 9/29/07, Morning Wood [EMAIL PROTECTED] wrote: Outlook Express blocks this by default, unless you click the show images dialog thingie Same with gmail -JP ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] Gadi Evron strikes again

2007-09-24 Thread Dude VanWinkle
On 9/22/07, Richard Golodner [EMAIL PROTECTED] wrote: WoriedSecurity saidblah, blah, nothing. Do you know Gadi? Have you ever corresponded with him? He adds some valuable knowledge to a legitimate issue that most Service Providers down to the home user should be aware of. I read the

[Full-disclosure] Barrister John Ade has O'day fer sale

2007-08-20 Thread Dude VanWinkle
Greetings, My name is Barrister John Ade. I am in charge of the estate of the Austrian Hacker: Adolph Oliver Nipple. Since his death on August 26th, the estate has been left in my hands, which include some odays for SElinux, and MS Windows Vista. Jesus (El Savior) Christ has informed me I am to

Re: [Full-disclosure] Barrister John Ade has O'day fer sale

2007-08-20 Thread Dude VanWinkle
On 8/20/07, Kyle Browning [EMAIL PROTECTED] wrote: Didn't we have a discussion this morning on how this is a disclosure mailing list not selling 0day ml? this is a really long ssn#, are you sure it is accurate? I try to deposit the 0days in your account, but was unsuccessful. please try

Re: [Full-disclosure] Help with education

2007-07-17 Thread Dude VanWinkle
On 7/17/07, Evan Pitstick [EMAIL PROTECTED] wrote: I am looking to become a security consultant(White hat) in a few years and I was looking for some advice on the best certifications to get, graduate level schools and majors, and any web sites that will continue to help me along my path. I am

Re: [Full-disclosure] Internet Explorer 0day exploit

2007-07-14 Thread Dude VanWinkle
On 7/14/07, Dragos Ruiu [EMAIL PROTECTED] wrote: On Tuesday 10 July 2007 08:53, Gadi Evron wrote: To paraphrase Guninski, this is still not a 0day. It is a vulnerability being disclosed. You're being pedantic Gadi. :-) Actually, the correct usage of the word would be: You are being a

Re: [Full-disclosure] Some of you may enjoy this... (iPhone disassembly)

2007-06-29 Thread Dude VanWinkle
On 6/29/07, Kevin Finisterre (lists) [EMAIL PROTECTED] wrote: http://www.ifixit.com/Guide/iPhone Has anyone been able to use the phone on any network aside from att yet? Is it as simple as soldering a new SIM after taking the back off? -JPwho is going to wait till the first few iWorms make

Re: [Full-disclosure] n3td3v says second internet exists

2007-06-25 Thread Dude VanWinkle
On 6/18/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: 2) The networks that DISA and friends run for various parts of the US government. (Hint - Google for 'DISN' - most of the hits on the first page will take you interesting places.) Question is: Would the DISA take over local botnets in

Re: [Full-disclosure] Month of Hashes of Random Hashes: Day 12

2007-06-23 Thread Dude VanWinkle
On 6/22/07, MOHORH [EMAIL PROTECTED] wrote: [ITEM #1] md5: 0d26087e7ea2e97b48bd86ce0410cf37 sha1: 0c9c5bd561ca8382573b0fa709c842ab9ce6e2bd sha256: 4cbdc77356a64e463986e84bd453db5b0117fc6319fe78bd8764e42d5668e7c8 No way, a troll of random hashes? 2 tickets for mass distribution of

Re: [Full-disclosure] Fwd: Month of Random Hashes (MoRH)

2007-06-10 Thread Dude VanWinkle
On 6/10/07, Jason Miller [EMAIL PROTECTED] wrote: -- Forwarded message -- From: Jason Miller [EMAIL PROTECTED] Date: Jun 10, 2007 9:07 PM Subject: Re: [Full-disclosure] Month of Random Hashes (MoRH) To: don bailey [EMAIL PROTECTED] please explain the details of how useless

Re: [Full-disclosure] You shady bastards.

2007-06-08 Thread Dude VanWinkle
On 6/8/07, Kradorex Xeron [EMAIL PROTECTED] wrote: On Friday 08 June 2007 07:12, Thierry Zoller wrote: Dear List, I know we have a World Police but luckily we have no World laws, how about some of you stick to things your supposed to be able to do, security, coding whatever and leave

Re: [Full-disclosure] You shady bastards.

2007-06-08 Thread Dude VanWinkle
On 6/8/07, Morning Wood [EMAIL PROTECTED] wrote: yeah, lets reply the more we can!!! I like cake. with Chocolate, or Vanilla icing? ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and

Re: [Full-disclosure] You shady bastards.

2007-06-06 Thread Dude VanWinkle
On 6/6/07, Larry Seltzer [EMAIL PROTECTED] wrote: Why would this be offensive? It's a company address. Someone might send e-mail containing company business to the address. Would you feel the same way if it was a voicemail left on his machine? What about a postal letter addressed to the person?

Re: [Full-disclosure] You shady bastards.

2007-06-06 Thread Dude VanWinkle
On 6/6/07, Larry Seltzer [EMAIL PROTECTED] wrote: Would you feel the same way if it was a voicemail left on his machine? What about a postal letter addressed to the person? To the company phone or address? Yes. Of course. They're company property, there for company purposes. Really? I have

Re: [Full-disclosure] You shady bastards.

2007-06-06 Thread Dude VanWinkle
On 6/6/07, Larry Seltzer [EMAIL PROTECTED] wrote: Really? I have gotten benefits and medical communications at my office addy. That stuff should be going to your home address, not least for this reason. Is should relevant? Is it a violation of HIPAA to read these communications, even if I

Re: [Full-disclosure] Palimm Palimm

2007-05-30 Thread Dude VanWinkle
Its going to take me a while, but I am gonna reverse these hashes back into your working exploits any day now wait!, I got one... nope On 5/30/07, Thierry Zoller [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 2CC54B002C8CCE8BEA797F015991098E

Re: [Full-disclosure] im in yr boxor. crackin yr pedophilez.

2007-05-30 Thread Dude VanWinkle
On 5/30/07, Waldo Warez [EMAIL PROTECTED] wrote: oh hai - i finded yr exploitz. in yr megan box. can has invizible codez. http://tinyurl.com/2s352q kthxbye FYI: the tinyurl leads here http://sexoffender.dsp.delaware.gov/cgi-bin/sexoff.cgi/var/log/messages?opt= which gives an

Re: [Full-disclosure] Hashes

2007-05-29 Thread Dude VanWinkle
On 5/29/07, Kradorex Xeron [EMAIL PROTECTED] wrote: To what? Your dog? The universe? an MP3 you downloaded? a program? :P I would guess to a PoC or chunk of vulnerable code, posted for integrity's sake -JP ___ Full-Disclosure - We believe in it.

Re: [Full-disclosure] Fight Censorship on Full-Disclosure

2007-05-12 Thread Dude VanWinkle
On 5/12/07, Dr. Neal Krawetz PhD [EMAIL PROTECTED] wrote: Hello all, It was brought to my attention that this list has become moderated. So you are the recently-out-of-retirement dude or dudes that claim they used to make up gobbles right? I am assuming this due to the recent challenge and

Re: [Full-disclosure] Month of ActiveX Bug

2007-05-03 Thread Dude VanWinkle
On 5/3/07, Larry Seltzer [EMAIL PROTECTED] wrote: Looks like this has turned into the Month of Officeocx bugs, since the first 3 are components sold in that package. snore... I know Larry, wtf is an office exploit good for? nothing thats what..

Re: [Full-disclosure] Month of ActiveX Bug

2007-05-03 Thread Dude VanWinkle
/ http://blogs.eweek.com/cheap_hack/ Contributing Editor, PC Magazine [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dude VanWinkle Sent: Thursday, May 03, 2007 3:39 PM To: Larry Seltzer Cc: full-disclosure@lists.grok.org.uk Subject: Re

Re: [Full-disclosure] Cryptome is dead (at least for now)

2007-05-02 Thread Dude VanWinkle
On 5/2/07, Brian Eaton [EMAIL PROTECTED] wrote: On 5/2/07, Open Phugu [EMAIL PROTECTED] wrote: John Young should set up cryptome as a tor hidden service. If Chinese dissidents can figure out how to blog, John Young should be able to figure out how to stay on the web one way or another. I

Re: [Full-disclosure] Apparently eEye's blog got p0wnd

2007-04-30 Thread Dude VanWinkle
do you think there is any truth to the code red bit? that has always been one of the more interesting security software company rumors -- that they release some of the worst code out there -JPthe easily fooled ___ Full-Disclosure - We believe in it.

Re: [Full-disclosure] War against Iran: Update from front lines

2007-04-15 Thread Dude VanWinkle
Q: What kind of douchebag/douchebagette falls prey to trolls on a security mailing list meant for public disclosures of vulnerabilities? A: More than you would expect, especially considering semi-recent postings -JPan idiot says what? What -Lots of ppl on FD

Re: [Full-disclosure] A Botted Fortune 500 a Day

2007-04-13 Thread Dude VanWinkle
From: poo [mailto:[EMAIL PROTECTED] Sent: Friday, April 13, 2007 6:03 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Full-disclosure] A Botted Fortune 500 a Day gadi.. SHUT UP On 4/13/07, Randall M [EMAIL PROTECTED] wrote: Did

Re: [Full-disclosure] Fabio has Tagged you! :)

2007-04-05 Thread Dude VanWinkle
On 4/4/07, Fabio Sarmento [EMAIL PROTECTED] wrote: Fabio S, 21 Brazil Fabio S has added you as a friend Is Fabio S your friend?

Re: [Full-disclosure] April 1 joke

2007-04-01 Thread Dude VanWinkle
On 4/1/07, Matti Ranta [EMAIL PROTECTED] wrote: I don't know how to use vi what do i do use vim :-P ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia -

Re: [Full-disclosure] Chinese Professor Cracks Fifth Data SecurityAlgorithm (SHA-1)

2007-03-24 Thread Dude VanWinkle
On 3/23/07, Michael Silk [EMAIL PROTECTED] wrote: On 3/23/07, Dave No, not that one Korn [EMAIL PROTECTED] wrote: Tim wrote: Hello, On Wed, Mar 21, 2007 at 06:45:19PM +0300, 3APA3A wrote: Dear Michael Silk, First, by reading 'crack' I thought lady can recover full

Re: [Full-disclosure] Sexy, spankable 22 year old girl looking for a wild time

2007-03-23 Thread Dude VanWinkle
On 3/22/07, evilrabbi [EMAIL PROTECTED] wrote: I called that number because I didn't think it was real snip suuure, THATS why you called up, you deviant little tampon-lusting monkey-man ;-) and apprently it wasn't. It was a real girl, but I don't belive it was the girl in the picture. The

Re: [Full-disclosure] March 2nd Chicago 2600/DefCon 312 Meeting Information

2007-03-01 Thread Dude VanWinkle
Does anyone know if there is a NYC 2600 group? I checked the site, but couldnt find any listings.. -JP On 2/28/07, Steven McGrath [EMAIL PROTECTED] wrote: The March Chicago 2600 Meeting is near! The meeting will be Friday, March 2nd at the Neighborhood Boys and Girls Club and will feature much

Re: [Full-disclosure] Google pageranked 4 doamin on sale...

2006-12-09 Thread Dude VanWinkle
whoops! 0Crap, I guess pagerank isnt based on content as I thought it was.. http://www.webworkshop.net/pagerank.html sorry bout that. So, correct me if I am wrong, but according to pagerank: if you have a reciprocal link with microsoft.com about patches, this increases your rank and because of

Re: [Full-disclosure] Google pageranked 4 doamin on sale...

2006-12-08 Thread Dude VanWinkle
On 12/8/06, Louis Wang [EMAIL PROTECTED] wrote: I'd like to sell my web site http://www.lwang.org. It has google pageranked 4, and full control of domain. The web server is in Czech, it has 500M space and 5G traffic per month. is it pageranked #4 for the word wang? what is the czech work

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 12/1/06, Jason Miller [EMAIL PROTECTED] wrote: I agree with Dave on this one. Dude Van, I thought it was illegal in the states..? Or am I mistaken? http://www.securityfocus.com/news/126 Also, think of this from the ISP's view, do they really want a service port scanning their users? And

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:31:11 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude On 12/1/06, Mike Huber [EMAIL PROTECTED] wrote: first of all, IANAL, but the TOS seem to cover the basics... Dude snip None-the-less, my 8-ball sees

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:33:00 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude Here is an example of what is legal vs what isnt: If you scan a Dude machine with nmap from one machine, that is not illegal. If you run Dude 100,00 nmap scans

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude Its obvious that anyone who hires Stonehenge Consulting services is Dude getting someone who cant read. I never said postscanning was illegal. Dude i said

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: If there's caselaw in Georgia, that's useful for Georgia, but certainly isn't referencable in the 49 other states. actually, it is. it is called legal precedence ___

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 12/1/06, Randall M [EMAIL PROTECTED] wrote: [ [-- [ [Message: 11 [Date: Fri, 1 Dec 2006 06:48:38 -0500 [From: Dude VanWinkle [EMAIL PROTECTED] [Subject: Re: [Full-disclosure] Nmap Online [To: Mike Huber [EMAIL PROTECTED] [Cc: full-disclosure

Re: [Full-disclosure] Nmap Online

2006-12-01 Thread Dude VanWinkle
On 01 Dec 2006 09:36:58 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: Dude == Dude VanWinkle [EMAIL PROTECTED] writes: Dude On 01 Dec 2006 08:54:23 -0800, Randal L. Schwartz merlyn@stonehenge.com wrote: If there's caselaw in Georgia, that's useful for Georgia, but certainly

Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability

2006-11-30 Thread Dude VanWinkle
On 11/29/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-043.html November 29, 2006 snip -- Disclosure Timeline: 2005.07.07 - Digital Vaccine released

Re: [Full-disclosure] ZDI-06-043: Novell Netware Client Print Provider Buffer Overflow Vulnerability

2006-11-30 Thread Dude VanWinkle
On 11/30/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Thanks for pointing this out JP, it does in fact look confusing. We determined during the Digital Vaccine filter creation process that a previously released filter was robust enough to block the attack without further modification and the

Re: [Full-disclosure] Anonymizing RFI Attacks Through Google

2006-11-24 Thread Dude VanWinkle
On 11/25/06, endrazine [EMAIL PROTECTED] wrote: Hi Gadi, I beg your pardon, but either I missed the purpose of this post, or you discovered hot water : this process of attack is a mere waste of time if one only reaches anonymity : in order to give google this new url to crawl, you'd have to

Re: [Full-disclosure] retiring from public security stuff

2006-11-12 Thread Dude VanWinkle
On 11/12/06, Georgi Guninski [EMAIL PROTECTED] wrote: fyi: retiring from public security stuff. public flaming is not clear atm. obviously this may change without notice. this does not mean selling out. No worries mate, you deserve a break. Thanks for your contributions to the infosec

Re: [Full-disclosure] some questions for Forensics

2006-11-07 Thread Dude VanWinkle
we are going to tell your professor that you are cheating!! -JP On 11/6/06, kijs kijs [EMAIL PROTECTED] wrote: hi all Last week,I'm looking for indexing infornation for Forensics. Is not understood very much regarding some questions: Questions 1: | Pr [ x(i1) x(i2)...x(ik) = a ] -

Re: [Full-disclosure] The Month of Kernel Bugs (MoKB)

2006-11-07 Thread Dude VanWinkle
On 11/7/06, M. B. Jr. [EMAIL PROTECTED] wrote: Hello gentlemen, I'm new to the list. Hope I can contribute and learn. Just want to share this thing I'm studying right now. It promises to be an interesting initiative from veteran researcher HD This is actually a project by LMH, although

[Full-disclosure] OT Question

2006-11-04 Thread Dude VanWinkle
I hate to ask, but I am kinda in a Bind that has nothing to do with DNS, Does anyone know where I can get a copy of Suse 9.0 professional? I have tried calling novell no no avail.l Also to no avail was buying a copy off of ebay (it was burned CD's that didnt match the MD5 and another one was

Re: [Full-disclosure] OT Question

2006-11-04 Thread Dude VanWinkle
On 11/4/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Dude VanWinkle wrote: I hate to ask, but I am kinda in a Bind that has nothing to do with DNS, Does anyone know where I can get a copy of Suse 9.0 professional? I have tried calling novell no no avail.l Also to no avail was buying

Re: [Full-disclosure] Putty Proxy login/password discolsure....

2006-11-02 Thread Dude VanWinkle
On 11/2/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On Thu, 02 Nov 2006 01:15:19 CST, nocfed said: And if you have physical access then you can simply use a floppy, usb dongle, or any other type of removable media to boot from. Once physical access is obtained then you pretty much have

Re: [Full-disclosure] Microsoft patches the WMI Object Broker bug

2006-11-01 Thread Dude VanWinkle
More here: http://www.eweek.com/article2/0,1759,2048968,00.asp?kc=EWRSS03119TX1K594 http://tinyurl.com/w2gcz An extremely critical vulnerability in Microsoft Visual Studio 2005 could put users at risk of remote code execution attacks, the company confirmed Nov. 1. ADVERTISEMENT The Redmond,

Re: [Full-disclosure] Vulnerability automation and Botnet solutions I expect to see this year

2006-10-27 Thread Dude VanWinkle
On 10/27/06, poo [EMAIL PROTECTED] wrote: *. Gadi Intelligence (very limited) You are just jealous that he has a job in infosec,and you are a 3rd shift helpdesk technician.I guess the official ratio of trolls to normal people have passed 1:1 on FD, sweet!

Re: [Full-disclosure] Plague Proof of Concept Linux backdoor

2006-10-22 Thread Dude VanWinkle
On 10/22/06, J. Oquendo [EMAIL PROTECTED] wrote: Plague is an odd proof of concept backdoor keeping tool based on the premise of using existing system files and commands to keep and maintain a backdoor on Linux systems. I could have modified this for BSD, Solaris, etc., but I didn't feel

Re: [Full-disclosure] Plague Proof of Concept Linux backdoor

2006-10-22 Thread Dude VanWinkle
On 10/22/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On Sun, 22 Oct 2006 06:29:35 -0500 [EMAIL PROTECTED] wrote: even if they have ssh access, there is still nothing they can do, except snip You said there when it should be their. Err, this isnt alt.nitpickers.english, and in fact we

  1   2   3   >