[Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Juergen.Pabel
Dear all, as in 2010 (http://seclists.org/fulldisclosure/2010/Sep/318) we will be conducting the Deutsche Post Security Cup this year again. Unfortunately, this year only participants from Germany are allowed to the contest (because of legal complications if international participants would be

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Harry Behrens
I guess this is strong encouragement for all international participants to supply their services in a ..well...unsolicited and unmonitored manner ;-)) -h On 20.03.2013 10:24, juergen.pa...@deutschepost.de wrote: Dear all, as in 2010 (http://seclists.org/fulldisclosure/2010/Sep/318) we wil

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Hurgel Bumpf
irst place. Don't be so closed-minded, most freaks dont have friends and/or a cr3w.   Thanks   Bonan the bavarian Von: "juergen.pa...@deutschepost.de" An: full-disclosure@lists.grok.org.uk Gesendet: 10:24 Mittwoch, 20.März 2013 Betreff: [Full

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Daniel Preussker
On 20.03.2013, at 13:34, Hurgel Bumpf wrote: > Most of the subscribers are single individuals. Why bother sending them a > invitaton when 99.9% are rejected because they dont have a "company" or a > "big team". There a lot of valuable and competent individuals out there which > are rejected bec

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Benji
>>I think its getting ridiculous, if you don't have a name in the industry you're getting sued for the vast majority of bugs you solve... >>And on the other hand, those same companies give away 3-15.000 for a single bug if the researcher happens to be known :| Examples please On Wed, Mar 20, 201

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Juergen.Pabel
Von: Hurgel Bumpf [mailto:l0rd_luna...@yahoo.com] Gesendet: Mittwoch, 20. März 2013 13:35 An: Pabel, Z 30a, BN; full-disclosure@lists.grok.org.uk Betreff: Re: [Full-disclosure] Deutsche Post Security Cup 2013 Most of the subscribers are single individuals. Why bother sending them a invitaton whe

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-20 Thread Daniel Preussker
On 20.03.2013, at 14:59, Benji wrote: > >>I think its getting ridiculous, if you don't have a name in the industry > >>you're getting sued for the vast majority of bugs you solve... > >>And on the other hand, those same companies give away 3-15.000 for a single > >>bug if the researcher happens

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-21 Thread Alex
nds and/or a cr3w. Thanks Bonan the bavarian VON: "juergen.pa...@deutschepost.de" AN: full-disclosure@lists.grok.org.uk GESENDET: 10:24 Mittwoch, 20.März 2013 BETREFF: [Full-disclosure] Deutsche Post Security Cup 2013 Dear all, as in 2010 (http://seclists.org/fulldisclosure/2010/Se

Re: [Full-disclosure] Deutsche Post Security Cup 2013

2013-03-21 Thread Hurgel Bumpf
Von: Alex An: full-disclosure@lists.grok.org.uk Gesendet: 18:46 Donnerstag, 21.März 2013 Betreff: Re: [Full-disclosure] Deutsche Post Security Cup 2013 IMHO the goal here is not to find many vulns, it is to find none and therefore "prove" that the product is secure. The E-POST product is hi