Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread saphex
ok On Tue, May 26, 2009 at 4:30 PM, David Blanc wrote: > On Tue, May 26, 2009 at 8:38 PM, Shell Code wrote: >> I would appreciate if you post replies to the list instead of sending >> it only to me. My comments inline. >> >> On Tue, May 26, 2009 at 5:10 PM, saphex wrote: I fail to understa

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread saphex
ok On Tue, May 26, 2009 at 4:08 PM, Shell Code wrote: > I would appreciate if you post replies to the list instead of sending > it only to me. My comments inline. > > On Tue, May 26, 2009 at 5:10 PM, saphex wrote: >>> I fail to understand what is new or interesting in this POC. If a >>> person w

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread Shell Code
I would appreciate if you post replies to the list instead of sending it only to me. My comments inline. On Tue, May 26, 2009 at 5:10 PM, saphex wrote: >> I fail to understand what is new or interesting in this POC. If a >> person with malicious intent gains so much access to a system that he >>

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread David Blanc
On Tue, May 26, 2009 at 8:38 PM, Shell Code wrote: > I would appreciate if you post replies to the list instead of sending > it only to me. My comments inline. > > On Tue, May 26, 2009 at 5:10 PM, saphex wrote: >>> I fail to understand what is new or interesting in this POC. If a >>> person with

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-26 Thread James Matthews
On the iPhone a new app came out called MobileSpy. Designed to secretly record all activity on the iPhone. OMG The iPhone now has spyware etc. No the user must 1. Jailbreak his phone 2. Download and install the Mobilespy application. Recently a person told me that stupidity is a capital crime.

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread Shell Code
On Wed, May 20, 2009 at 6:12 AM, saphex wrote: > I think this is interesting, http://myf00.net/?p=18 > > ___ > Full-Disclosure - We believe in it. > Charter: http://lists.grok.org.uk/full-disclosure-charter.html > Hosted and sponsored by Secunia - http:/

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread Fosforo
Are we missing DNS stuff ? Are plugins signed ? is NoScript being used by end users ? Maybe an evilgrade plugin is comming []s Fosforo On Mon, May 25, 2009 at 3:24 PM, FUDder Guy wrote: > On Mon, May 25, 2009 at 8:26 PM, saphex wrote: > > This isn't about making the user install a malware

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread FUDder Guy
On Mon, May 25, 2009 at 8:26 PM, saphex wrote: > This isn't about making the user install a malware add-on. It's about > gaining access to the system trough an exploit, or physical access, > modify an existing add-on with your code. And Firefox wont even > notice. Instead of installing a fancy roo

Re: [Full-disclosure] FFSpy, a firefox malware PoC

2009-05-25 Thread FUDder Guy
> From: saphex > Date: Wed, 20 May 2009 01:42:16 +0100 > > I think this is interesting, http://myf00.net/?p=18 > So, how does someone manage to edit the overlay file? Are they going to use some javascript from a malicious website to edit the overlay file of an addon? Or are they supplying a malw

[Full-disclosure] FFSpy, a firefox malware PoC

2009-05-19 Thread saphex
I think this is interesting, http://myf00.net/?p=18 ___ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/