Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-12-03 Thread Mike C
On Wed, Dec 3, 2008 at 12:17 PM, Mike Preston [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Mike C wrote: | On Mon, Dec 1, 2008 at 5:27 PM, rholgstad [EMAIL PROTECTED] wrote: | and how does making a color based on these inputs protect people? | | | Once all

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-12-03 Thread Mike C
On Tue, Dec 2, 2008 at 11:29 AM, Elazar Broad [EMAIL PROTECTED] wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 02 Dec 2008 11:50:46 -0500 rholgstad [EMAIL PROTECTED] wrote: Mike C wrote: On Mon, Dec 1, 2008 at 5:27 PM, rholgstad [EMAIL PROTECTED] wrote: and how does making

Re: [Full-disclosure] News for Ureleet

2008-12-03 Thread Mike C
Hye Guys, I though we had settled the issues offline. Lets restart our discussions.. this bickering is highly unnecessary on the list. -- MC Security Researcher Lead, Project Chroma http://sites.google.com/site/projectchromaproject/ ___

Re: [Full-disclosure] Iran executes IT expert who spied for Israel

2008-12-03 Thread Mike C
On Wed, Dec 3, 2008 at 6:55 AM, Ureleet [EMAIL PROTECTED] wrote: hes not a troll andrew. he brings up good points. u nd i are the only trolls here. i only troll u. you troll every1. Yes, acceptance is he first stage of recovery for the both of you. Let us continue with the offline

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-12-02 Thread Mike C
On Mon, Dec 1, 2008 at 5:27 PM, rholgstad [EMAIL PROTECTED] wrote: and how does making a color based on these inputs protect people? Once all desktops have an icon or widget (say at the right hand corner) with the color, and this is consistently seen everywhere, the users will start associating

Re: [Full-disclosure] Security industry software license

2008-12-02 Thread Mike C
On Mon, Dec 1, 2008 at 7:50 PM, Joel Helgeson [EMAIL PROTECTED] wrote: I agree - the biggest BS term in existence is the term Cyberterror. If my web server crashes, is it the result of a Jihadist? Do I care? Yes! The kind of exploiter decides the kind of evil thing that would be done from a

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-12-01 Thread Mike C
On Mon, Dec 1, 2008 at 4:21 AM, vulcanius [EMAIL PROTECTED] wrote: By the way, I also noticed that the new site for your project has the current threat level as yellow. Is it safe to assume that you've already got your metric systems in place and running? Yes, We do have a working framework

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-12-01 Thread Mike C
On Mon, Dec 1, 2008 at 4:36 AM, rholgstad [EMAIL PROTECTED] wrote: Do you actually want to go this route after seeing dhs being laughed at daily with their retarded color scheme? You realize that color schemes do nothing for real security and are just more policy BS right? A well implemented

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-12-01 Thread Mike C
On Mon, Dec 1, 2008 at 4:43 AM, Raj Mathur [EMAIL PROTECTED] wrote: On Monday 01 Dec 2008, vulcanius wrote: [snip] is n3td3v's abstract world [more snip] Er, they're the same person! And you are Gordon Brown. Really. Believe me, even though I'm not from linux-delhi.org -- MC Security

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-11-30 Thread Mike C
. http://isc.sans.org/ -Original Message- From: [EMAIL PROTECTED] [mailto:full-disclosure- [EMAIL PROTECTED] On Behalf Of Mike C Sent: Saturday, November 29, 2008 9:35 PM To: Full Disclosure Subject: [Full-disclosure] Project Chroma: A color code for the state ofcyber security Hi

Re: [Full-disclosure] Project Chroma: A color code for the state ofcyber security

2008-11-30 Thread Mike C
On Sun, Nov 30, 2008 at 9:51 PM, vulcanius [EMAIL PROTECTED] wrote: So have you actually come up with a feasible metric for measuring the current state of malicious/non-malicious traffic on the tubes vs the current Yes. I;m working with industry insiders and we have a set of tangible

Re: [Full-disclosure] Indian allegations alarm Pakistan

2008-11-29 Thread Mike C
On Sun, Nov 30, 2008 at 7:39 AM, Raj Mathur [EMAIL PROTECTED] wrote: On Sunday 30 Nov 2008, n3td3v wrote: Indian-Pakistan war is about to kick off folks... http://news.bbc.co.uk/1/hi/world/south_asia/7757031.stm I know it's not going to happen, but can I request you once again shut the

[Full-disclosure] Project Chroma: A color code for the state of cyber security

2008-11-29 Thread Mike C
Hi, It is time to take an example from Homeland Security and define codes of color for cyber-warfare threat levels. I propose the following: Green level: There is negligible threat to online security. Yellow level : There is a minimal level of threat, and this must be monitored and contained.

Re: [Full-disclosure] Indian allegations alarm Pakistan

2008-11-29 Thread Mike C
On Sun, Nov 30, 2008 at 11:11 AM, n3td3v [EMAIL PROTECTED] wrote: On Sun, Nov 30, 2008 at 5:25 AM, Mike C [EMAIL PROTECTED] wrote: On Sun, Nov 30, 2008 at 7:39 AM, Raj Mathur [EMAIL PROTECTED] wrote: On Sunday 30 Nov 2008, n3td3v wrote: Indian-Pakistan war is about to kick off folks

Re: [Full-disclosure] Its time to break the news to Ureleet

2008-11-27 Thread Mike C
Hey n3td3v/ureleet, Lets keep working on the offline resolution of the personal issues here, before we continue back on the mailing list. This will be for the better of security research industry. -- MC On Thu, Nov 27, 2008 at 3:27 AM, n3td3v [EMAIL PROTECTED] wrote: Its time to break the

Re: [Full-disclosure] Browser Rider v20081124 is out.

2008-11-27 Thread Mike C
Just noting that I was contacted offline by the author of this tool, and informed that the project will have regular updates. those looking forward to it's progress will be glad. -- MC ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-disclosure] Fwd: Comment on: 2 engineers from China sentenced for espionage

2008-11-27 Thread Mike C
may be the reason for the flamish mails. I'll update the list as to the progress here) -- MC On Thu, Nov 27, 2008 at 3:12 AM, Ureleet [EMAIL PROTECTED] wrote: this just in: mike c says n3td3v's group is pointless and redundant On Wed, Nov 26, 2008 at 12:49 PM, Mike C [EMAIL PROTECTED] wrote

Re: [Full-disclosure] month of not replying to n3td3v

2008-11-27 Thread Mike C
kept elsewhere and not among serious security researchers. I'll update the list once the discussions bear fruit. -- MC On Thu, Nov 27, 2008 at 4:44 PM, John Lamb [EMAIL PROTECTED] wrote: Hi Mike C, I'm a long time lurker on FD, and I'm trying to organise a month long IGNOREATHON where nobody

Re: [Full-disclosure] im so done.

2008-11-27 Thread Mike C
On Fri, Nov 28, 2008 at 8:00 AM, don bailey [EMAIL PROTECTED] wrote: so, for now, i am gone. n3td3v, u r a disgrace 2 the community by calling urself 1 of us. I really wish you would stay. You and n3td3v are destroying the full-disclosure community. That's a good thing. Keep bantering,

Re: [Full-disclosure] Fwd: Comment on: 2 engineers from China sentenced for espionage

2008-11-26 Thread Mike C
On Wed, Nov 26, 2008 at 2:40 AM, n3td3v [EMAIL PROTECTED] wrote: Mike C i'd just like to clarify that as of yet I'm not a part of your group as a matter of principle. there is a far more focussed and serious mailing list where this stuff belongs. On Mon, Nov 24, 2008 at 9:40 PM, Ureleet

Re: [Full-disclosure] Anehta0.6.0 -- a new XSS Attack Platform!

2008-11-26 Thread Mike C
2008/11/25 pst axis [EMAIL PROTECTED] Anehta is an open source XSS Attack Platform which is maintained by [EMAIL PROTECTED] Project Home: http://anehta.googlecode.com Demo Video: http://hi.baidu.com/aullik5/blog/item/cb4cd5899283b093a4c272a9.html Online Demo:

Re: [Full-disclosure] Updates for SSH Tectia plaintext recovery vulnerability released

2008-11-26 Thread Mike C
On Wed, Nov 26, 2008 at 9:03 AM, n3td3v [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 3:26 AM, Ureleet [EMAIL PROTECTED] wrote: On Tue, Nov 25, 2008 at 8:57 PM, n3td3v [EMAIL PROTECTED] wrote: On Wed, Nov 26, 2008 at 12:21 AM, Ureleet [EMAIL PROTECTED] wrote: On Tue, Nov 25, 2008 at

Re: [Full-disclosure] Microsoft takes 7 years to 'solve' a problem?!

2008-11-26 Thread Mike C
On Tue, Nov 25, 2008 at 9:21 PM, Memisyazici, Aras [EMAIL PROTECTED] wrote: snip M$ should just bite the incompatibility bullet and turn NTLM off /snip No! not without losing a big big advantage it enjoys over other platforms. This will render god-knows-how-many binary apps useless and

Re: [Full-disclosure] Browser Rider v20081124 is out.

2008-11-26 Thread Mike C
On Tue, Nov 25, 2008 at 4:53 AM, Benjamin Mossé [EMAIL PROTECTED]wrote: Date: 25th of November, 2008 1. What is Browser Rider? Browser Rider is a hacking framework to build payloads that exploit the browser. The project aims to provide a powerful, simple and flexible interface to any

Re: [Full-disclosure] Worried about getting sued by Cnet

2008-11-26 Thread Mike C
I have previously had long discussions with a lawyer friend, who has assured me that it is quite alright for copyrighted material to be quoted for critical analysis. This information should prove helpful here. -- MC On Thu, Nov 27, 2008 at 4:47 AM, n3td3v [EMAIL PROTECTED] wrote: Gadi Evron

Re: [Full-disclosure] [inbox] Re: Fwd: Comment on: USB devices spreading viruses

2008-11-23 Thread Mike C
On Sun, Nov 23, 2008 at 7:20 PM, imipak [EMAIL PROTECTED] wrote: Exibar wrote: wow, disabling files to run from the root of all drives would never, ever fly in a corporate environment. Although I do like the idea on stopping autorun malware, it would work... but oh the calls to the

Re: [Full-disclosure] Fwd: Comment on: 2 engineers from China sentenced for espionage

2008-11-23 Thread Mike C
On Sun, Nov 23, 2008 at 4:16 AM, n3td3v [EMAIL PROTECTED] wrote: -- Forwarded message -- From: n3td3v [EMAIL PROTECTED] Date: Sat, Nov 22, 2008 at 10:33 PM Subject: Comment on: 2 engineers from China sentenced for espionage To: n3td3v [EMAIL PROTECTED] by n3td3v November

Re: [Full-disclosure] Fwd: Comment on: 2 engineers from China sentenced for espionage

2008-11-23 Thread Mike C
On Mon, Nov 24, 2008 at 3:40 AM, Ureleet [EMAIL PROTECTED] wrote: On Sun, Nov 23, 2008 at 10:54 AM, Mike C [EMAIL PROTECTED] wrote: Hi n3td3v, Thanks for the update. Going by the recent history, I can see that there will be some comments deriding your posting, but there are those

Re: [Full-disclosure] Fwd: Police probe BNP link to car fire

2008-11-21 Thread Mike C
On Fri, Nov 21, 2008 at 6:47 PM, James Rankin [EMAIL PROTECTED] wrote: I can work the BBC website myself just fine, cheers Yes, but it is statistically more likely you will read this if n3td3v posts it here. Thus his posting. I sense an air of hostility towards this security researcher, and

Re: [Full-disclosure] ureleet

2008-10-21 Thread Mike C
Hi All, This has gone on for too long. I'd request all of you to take your banter offline. There is nothing security related in your discussions, and no one on the list wants to read your rants. Cheers MikeC On Wed, Oct 22, 2008 at 9:20 AM, Ureleet [EMAIL PROTECTED] wrote: welp then its not