Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Jordan Wiens
On Sun, 21 Mar 2004, Gary Flynn wrote: > Byron Copeland wrote: > > >True. And tell me you can get 7.0 to scan anything without problems? > > > > > I've been holding off on 7 because 6.x has been working fine but was > planning on upgrading soon. Want to share problems you've seen > with 7? I've

Re: [Full-Disclosure] NEVER open attachments

2004-03-21 Thread Troy
On Sat, 20 Mar 2004 22:50:13 -0400, Steve Menard <[EMAIL PROTECTED]> wrote: > But that [outlook] entails paying > BIG BUCKS to some > large monopoly I wasn't implying that Outlook was the only way to go. I was just saying that even Outlook doesn't have the problem. OE is the only client I've seen

Re: [Full-Disclosure] NEVER open attachments

2004-03-21 Thread Troy
On Sun, 21 Mar 2004 13:44:51 +0100, Nico Golde <[EMAIL PROTECTED]> wrote: > yes, because you don't use outlook ;) True, though I am pretty much forced to use Outlook at work, and I noticed that it also treats *just* the signature as an attachment. So, it seems limited to Outlook Express. A quick

[Full-Disclosure] RealSecure

2004-03-21 Thread Byron Copeland
Just curious, I wonder how many Real Secure sensors out there are being rebuilt right now? -- "Save yourself from the 'Gates' of hell, use Linux." -- The_Kind @ LinuxNet signature.asc Description: This is a digitally signed message part

Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Paul Schmehl
--On Sunday, March 21, 2004 9:51 PM -0500 Gary Flynn <[EMAIL PROTECTED]> wrote: A scanner is not a server although I've been tempted. :) I'd argue that an enterprise scanning solution *should* be on a server, and a well secured one at that. Paul Schmehl ([EMAIL PROTECTED]) Adjunct Information S

Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Gary Flynn
Byron Copeland wrote: True. And tell me you can get 7.0 to scan anything without problems? I've been holding off on 7 because 6.x has been working fine but was planning on upgrading soon. Want to share problems you've seen with 7? ___ Full-Disclosu

Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Gary Flynn
Paul Schmehl wrote: --On Monday, March 22, 2004 1:49 AM +0100 Niek Baakman <[EMAIL PROTECTED]> wrote: Burton M. Strauss III wrote: That "Technical Preview" is a Release Candidate, which they suggest you NOT apply to production servers. -Burton Last time I checked XP isn't a server OS :) Te

Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Byron Copeland
On Sun, 2004-03-21 at 20:40, Paul Schmehl wrote: > --On Monday, March 22, 2004 1:49 AM +0100 Niek Baakman > <[EMAIL PROTECTED]> wrote: > > > Burton M. Strauss III wrote: > > > >> That "Technical Preview" is a Release Candidate, which they suggest you > >> NOT apply to production servers. > >> > >

Re: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Jim Richardson
On Sun, Mar 21, 2004 at 09:49:29AM +0100, Cedric Blancher wrote: Le dim 21/03/2004 à 02:04, Jim Richardson a écrit : >Keylogger ? Installed how? With the worm... Where? /home is mounted noexec. -- Jim Richardson http://www.eskimo.com/~warlock "You have grown old in the fine art of bastardy

Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Paul Schmehl
--On Monday, March 22, 2004 1:49 AM +0100 Niek Baakman <[EMAIL PROTECTED]> wrote: Burton M. Strauss III wrote: That "Technical Preview" is a Release Candidate, which they suggest you NOT apply to production servers. -Burton Last time I checked XP isn't a server OS :) Tell ISS that. They *r

Re: [Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Niek Baakman
Burton M. Strauss III wrote: That "Technical Preview" is a Release Candidate, which they suggest you NOT apply to production servers. -Burton Last time I checked XP isn't a server OS :) Regards, Niek ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Alain Crespo
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sunday 21 March 2004 18:54, Frank Knobbe wrote: > On Sat, 2004-03-20 at 19:41, Max Valdez wrote: > > > Keylogger ? > > > > Intelligent enoght to know wish keystrokes are passphrase ?? > > Nah, keyloggers don't have to be intelligent, they just have

Re: [Full-Disclosure] RE: Any dissasemblies of the Witty worm yet?

2004-03-21 Thread Byron Copeland
On Sun, 2004-03-21 at 16:18, Matthew Murphy wrote: > "Hugh Mann" <[EMAIL PROTECTED]> writes: > > >3. If someone can trace the origin of this worm, it might shed light on > the > > >origin of SQL Slammer as well? > > > > Definitely a big NO. > > Indeed this does appear to be accurate. While it loo

Re: [Full-Disclosure] RE: Any dissasemblies of the Witty worm yet?

2004-03-21 Thread Matthew Murphy
"Hugh Mann" <[EMAIL PROTECTED]> writes: > >3. If someone can trace the origin of this worm, it might shed light on the > >origin of SQL Slammer as well? > > Definitely a big NO. Indeed this does appear to be accurate. While it looks as though the worm is technically similar to Slammer, think abou

RE: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Alerta Redsegura
>On Sat, 2004-03-20 at 19:41, Max Valdez wrote: >> > Keylogger ? >> Intelligent enoght to know wish keystrokes are passphrase ?? >Nah, keyloggers don't have to be intelligent, they just have to log >data. It is *you* that needs to be intelligent when reviewing the >captured key strokes. I woul

Re: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Frank Knobbe
On Sat, 2004-03-20 at 19:41, Max Valdez wrote: > > Keylogger ? > Intelligent enoght to know wish keystrokes are passphrase ?? Nah, keyloggers don't have to be intelligent, they just have to log data. It is *you* that needs to be intelligent when reviewing the captured key strokes. Examples: 1)

RE: [Full-Disclosure] NEVER open attachments

2004-03-21 Thread Jeff Schreiner
Not necessarily... My fully registered and activated copy of Office Professional Enterprise 2003 was given to me free by M$all I had to do was register for their Office System 2003 event...had to listen to a M$ rep ramble for 8 hours about the Office System but hey I figure I can give them 8 h

RE: [Full-Disclosure] RE: Any dissasemblies of the Witty worm yet?

2004-03-21 Thread Hugh Mann
From: "Disclosure From OSSI" <[EMAIL PROTECTED]> From the quick analysis of this worm (retrieved from http://isc.incidents.org/diary.html?date=2004-03-20), it seems that it bears strange similarity with SQL Slammer for the following points: 1. It uses the same "push ascii" format as SQL Slam

[Full-Disclosure] Re: NEVER open attachments

2004-03-21 Thread gadgeteer
On Sun, Mar 21, 2004 at 09:05:11AM -0500, Luke Scharf ([EMAIL PROTECTED]) wrote: > > But that [outlook] entails paying > > BIG BUCKS to some > > large monopoly > > > > many persons find that repugnant > > You already paid big bucks to that monopoly for Outlook Express. The > cost was just hidden

[Full-Disclosure] Free x.509 Certs (WAS Re: NEVER open attachments)

2004-03-21 Thread Jeremiah Cornelius
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 20 March 2004 19:16, Bill Royds wrote: > So the value of signing your messages  doesn't really scale. > That is why S/MIME is used by most commercial MUA's. Even though you have > to pay for the certificate, you can pretty well guarantee th

Re: [Full-Disclosure] NEVER open attachments

2004-03-21 Thread Luke Scharf
On Sat, 2004-03-20 at 21:50, Steve Menard wrote: > Troy wrote: > > >On Sat, 20 Mar 2004 17:27:56 +0100, "Frank de Wit" <[EMAIL PROTECTED]> wrote: > > > >If you were to switch email clients, you wouldn't have this problem. > >Even if you went to Outlook, you could read their messages without > >ope

[Full-Disclosure] RE: XP SP2 is out

2004-03-21 Thread Burton M. Strauss III
That "Technical Preview" is a Release Candidate, which they suggest you NOT apply to production servers. -Burton > -Original Message- > From: Gadi Evron [mailto:[EMAIL PROTECTED] > Sent: Friday, March 19, 2004 5:49 PM > To: Windows NTBugtraq Mailing List; [EMAIL PROTECTED] > Cc: [EMAI

Re: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Max Valdez
On Saturday 20 March 2004 6:27 pm, Cedric Blancher wrote: > Le dim 21/03/2004 à 00:33, Jim Richardson a écrit : > > I would be interested to see how it would accomplish that. > > Keylogger ? Intelligent enoght to know wish keystrokes are passphrase ?? If that can be doable, why not be able to del

Re: [Full-Disclosure] NEVER open attachments

2004-03-21 Thread Nico Golde
Hello Troy, * Troy <[EMAIL PROTECTED]> [2004-03-21 12:24]: > > if many people here have the same problem i will not sign my mails in > > the future to this mailinglist in the hope that all can read my mails. > > regards nico > > FYI, with my mailer, your emails show up as plain text message with

Re: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Cedric Blancher
Le dim 21/03/2004 à 02:41, Max Valdez a écrit : > > Keylogger ? > Intelligent enoght to know wish keystrokes are passphrase ?? Good point, if we consider the worm to be autonomous. But a worm may be a wonderful information gathering tool for someone that is able to extract strings that could be

OT - Groupwise Protocol(s) (was Re: [Full-Disclosure] Operating Systems Security, 'Microsoft Security, baby steps')

2004-03-21 Thread Ian Latter
Hello Daniele, I'm catching up on email and saw this -- are you (or anyone else here) familiar with the notify protocol running under the fat-client verison of Groupwise? If so can you email me off list .. I want to know if there's a way around the UDP->TCP flip that it does mid- stream (can

Re: [Full-Disclosure] Re: pgp passphrase

2004-03-21 Thread Cedric Blancher
Le dim 21/03/2004 à 02:04, Jim Richardson a écrit : > >Keylogger ? > Installed how? With the worm... -- http://www.netexit.com/~sid/ PGP KeyID: 157E98EE FingerPrint: FA62226DA9E72FA8AECAA240008B480E157E98EE >> Hi! I'm your friendly neighbourhood signature virus. >> Copy me to your signature fil

Re: [Full-Disclosure] Re: User Insecurity

2004-03-21 Thread Dave Horsfall
On Fri, 19 Mar 2004 [EMAIL PROTECTED] wrote: > OTOH, I learned the theory behind the design of the various systems that > comprise an automobile and got some hands on experience rebuilding > engines in high school auto shop. While I do not pretend to have the > working skills and knowledge to act

[Full-Disclosure] Re: Document

2004-03-21 Thread mattmurphy
___ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html