Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread Shell Code
On Wed, May 20, 2009 at 6:12 AM, saphex sap...@gmail.com wrote: I think this is interesting, http://myf00.net/?p=18 ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread James Matthews
On the iPhone a new app came out called MobileSpy. Designed to secretly record all activity on the iPhone. OMG The iPhone now has spyware etc. No the user must 1. Jailbreak his phone 2. Download and install the Mobilespy application. Recently a person told me that stupidity is a capital crime.

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread David Blanc
On Tue, May 26, 2009 at 8:38 PM, Shell Code technobus...@gmail.com wrote: I would appreciate if you post replies to the list instead of sending it only to me. My comments inline. On Tue, May 26, 2009 at 5:10 PM, saphex sap...@gmail.com wrote: I fail to understand what is new or interesting in

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread Shell Code
I would appreciate if you post replies to the list instead of sending it only to me. My comments inline. On Tue, May 26, 2009 at 5:10 PM, saphex sap...@gmail.com wrote: I fail to understand what is new or interesting in this POC. If a person with malicious intent gains so much access to a

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread saphex
ok On Tue, May 26, 2009 at 4:08 PM, Shell Code technobus...@gmail.com wrote: I would appreciate if you post replies to the list instead of sending it only to me. My comments inline. On Tue, May 26, 2009 at 5:10 PM, saphex sap...@gmail.com wrote: I fail to understand what is new or

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread saphex
ok On Tue, May 26, 2009 at 4:30 PM, David Blanc davidblanc1...@gmail.com wrote: On Tue, May 26, 2009 at 8:38 PM, Shell Code technobus...@gmail.com wrote: I would appreciate if you post replies to the list instead of sending it only to me. My comments inline. On Tue, May 26, 2009 at 5:10 PM,

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread FUDder Guy
From: saphex saphex_at_gmail.com Date: Wed, 20 May 2009 01:42:16 +0100 I think this is interesting, http://myf00.net/?p=18 So, how does someone manage to edit the overlay file? Are they going to use some javascript from a malicious website to edit the overlay file of an addon? Or are they

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread FUDder Guy
On Mon, May 25, 2009 at 8:26 PM, saphex sap...@gmail.com wrote: This isn't about making the user install a malware add-on. It's about gaining access to the system trough an exploit, or physical access, modify an existing add-on with your code. And Firefox wont even notice. Instead of

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread Fosforo
Are we missing DNS stuff ? Are plugins signed ? is NoScript being used by end users ? Maybe an evilgrade plugin is comming []s Fosforo On Mon, May 25, 2009 at 3:24 PM, FUDder Guy fudder...@gmail.com wrote: On Mon, May 25, 2009 at 8:26 PM, saphex sap...@gmail.com wrote: This isn't about

[Full-disclosure] FFSpy, a firefox malware PoC

2009-05-19 Thread saphex
I think this is interesting, http://myf00.net/?p=18 ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/