Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-02-03 Thread wac
In any case i wonder how much google is going to respect corporate, industry secret or all that stuff you don't want them to know with google wave. Best thing to do is not to use that. I really doubt that it is an improvement and i think i will hardly ever need it. Is just more fanboi food.

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-23 Thread sunjester
is this really supposed to work? http://i45.tinypic.com/nds8lx.png I don't see much wrong here, isn't it doing exactly what it's supposed to do? Display the data given in the xml? -- Founder/Activist http://fusecurity.com/ | Free Security Technology

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-21 Thread bugtraq
Well, that's exactly what I'm saying. Pretending that this is some kind new exploit class simply because Google Wave is used is stupid. This is the logical extension of e-mail and instant message and social network attacks to the next potential platform. Following in the history of the

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-21 Thread dramacrat
inb4 front page news 2010/1/21 bugt...@cgisecurity.net Well, that's exactly what I'm saying. Pretending that this is some kind new exploit class simply because Google Wave is used is stupid. This is the logical extension of e-mail and instant message and social network attacks to the

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-20 Thread omg wtf
Lol. Everyone keeps forgetting the social engineering aspects of utilizing exploits. Especially if someone is using AntiVirus 2011 and has a google wave account. On Tue, Jan 19, 2010 at 8:10 PM, valdis.kletni...@vt.edu wrote: On Tue, 19 Jan 2010 19:01:36 CST, Rohit Patnaik said: Yeah, no

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-20 Thread Christian Sciberras
That's what I said about human error, scanning is no solution unless a clear UI is used which makes social engineering practically impossible. On Wed, Jan 20, 2010 at 5:29 PM, omg wtf hexma...@gmail.com wrote: Lol. Everyone keeps forgetting the social engineering aspects of utilizing

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-20 Thread Rohit Patnaik
Well, that's exactly what I'm saying. Pretending that this is some kind new exploit class simply because Google Wave is used is stupid. This is the logical extension of e-mail and instant message and social network attacks to the next potential platform. -- Rohit Patnaik On Tue, Jan 19, 2010

[Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-19 Thread NSO Research
_ Security Advisory NSOADV-2010-002 _ _ Title: Google Wave Design Bugs Severity: Low Advisory ID:NSOADV-2010-002 Found Date:

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-19 Thread dramacrat
This is the stupidest advisory I have read on this list in at least two months. 2010/1/19 NSO Research nso-resea...@sotiriu.de _ Security Advisory NSOADV-2010-002 _ _

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-19 Thread omg wtf
Apparently not. Read Google's Response: 2010.01.14: Google Security Team informs me, that uploaded files will be now scanned for malware. Google Gadgets will be not updated. On Tue, Jan 19, 2010 at 7:11 AM, dramacrat yirim...@gmail.com wrote: This is the stupidest advisory I have

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-19 Thread Rohit Patnaik
Yeah, no kidding. Surprise! Untrusted files can be malicious. If you accept files from those whom you do not trust, whether its via e-mail, instant message, Google Wave, or physical media, you well and truly deserve the virus that'll eventually infect your machine. -- Rohit Patnaik On Tue, Jan

Re: [Full-disclosure] NSOADV-2010-002: Google Wave Design Bugs

2010-01-19 Thread Valdis . Kletnieks
On Tue, 19 Jan 2010 19:01:36 CST, Rohit Patnaik said: Yeah, no kidding. Surprise! Untrusted files can be malicious. If you accept files from those whom you do not trust, whether its via e-mail, instant message, Google Wave, or physical media, you well and truly deserve the virus that'll