[Full-Disclosure] RE: problem with stepping stones.

2004-05-08 Thread xtrecate
I've experienced similar problems (specific to Windows console FTP piped through multiple shells). I wish I could say I tracked down the cause of the problem, but alas I did no such thing. Using TFTP cleared the problem right up, and I've not experienced it since. Using ncftp in place of the

RE: [Full-Disclosure] Psexec on *NIX

2004-05-08 Thread xtrecate
One can't always be sure that SSH will be installed on the _Windows_ server you'd like to run a command on. At least not in large windows networks. Psexec does not rely on any 3rd party service installations (i.e. ssh), and so should function across a domain and via vpn with no additional

Re[2]: [Full-Disclosure] KDE was hacked

2004-05-08 Thread 3APA3A
Dear Seth Alan Woolley, --Saturday, May 8, 2004, 2:14:49 AM, you wrote to [EMAIL PROTECTED]: SAW Anybody using a CVS build of KDE is taking an inherent risk for such SAW things as this. Anybody using an official release would of course have SAW a plethora of people reviewing each commit. It

[Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Feher Tamas
http://news.bbc.co.uk/1/hi/world/europe/3695857.stm Alleged Sasser LSASS worm creator J. Sven (probably the same teenager who wrote some of the later Netsky variants) was arrested by police in the northern german town of Rotenburg. Rumor says it was the CIA or FBI who tracked him. Sincerely:

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Rainer Duffner
Feher Tamas wrote: http://news.bbc.co.uk/1/hi/world/europe/3695857.stm Alleged Sasser LSASS worm creator J. Sven (probably the same teenager who wrote some of the later Netsky variants) was arrested by police in the northern german town of Rotenburg. Rumor says it was the CIA or FBI who

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Jedi/Sector One
On Sat, May 08, 2004 at 01:32:27PM +0200, Feher Tamas wrote: Alleged Sasser LSASS worm creator J. Sven (probably the same teenager who wrote some of the later Netsky variants) was arrested by police in the northern german town of Rotenburg. And a few months ago, a large amount of money was

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Thilo Schulz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Saturday 08 May 2004 13:32, Feher Tamas wrote: Alleged Sasser LSASS worm creator J. Sven (probably the same teenager who wrote some of the later Netsky variants) was arrested by police in the northern german town of Rotenburg. Not only this,

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Tilo Eilers
Feher Tamas wrote: http://news.bbc.co.uk/1/hi/world/europe/3695857.stm Alleged Sasser LSASS worm creator J. Sven (probably the same teenager who wrote some of the later Netsky variants) was arrested by police in the northern german town of Rotenburg. Rumor says it was the CIA or FBI who

RE: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Poof
You're kidding there, right? . ~ And a few months ago, a large amount of money was transfered to his account from a couple of popular antivirus vendors :) smime.p7s Description: S/MIME cryptographic signature

Re: [Full-Disclosure] I think some one might have screwed-up

2004-05-08 Thread Rick Runowski
Adam/David, I agree with David to a point. It seems to me that this is ok so long as the employee's know it goes out to the web live, or there is some standard as to what is and is not allowed to be put into the logs. A (very brief) look through a few of the pages suggest this to be the case.

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Tobias Weisserth
Hi, On Sat, 2004-05-08 at 14:37, Thilo Schulz wrote: ... Not only this, the Phatbot creator has been hunted down too in Baden Württemberg, which is a federal state in south-west germany. See http://www.heise.de/newsticker/meldung/47209 (german). Wir können alles. Außer Hochdeutsch. :-)

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread james . bliss
Conspiracy Theories are a wonderful thing, yet truth is so hard to come by. On Sat, May 08, 2004 at 01:32:27PM +0200, Feher Tamas wrote: Alleged Sasser LSASS worm creator J. Sven (probably the same teenager who wrote some of the later Netsky variants) was arrested by police in the

Re: [Full-Disclosure] btchaos

2004-05-08 Thread Collin R. Mulliner
Hi Stan, i am working on an article about bluetooth security. I have read/heard about a program called btchaos. Does anybody have more information about this tool? from what the people write in the forums, btchaos is nothing more then a better btxml (http://www.saftware.de/bluetooth/btxml.c)

RE: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Geoff Shively
HANOVER, Germany (Reuters) - A tip from reward-seekers and information from Microsoft led to the arrest of an 18-year-old suspected of creating the Sasser computer worm, German police and the software giant said on Saturday. Spokesman Frank Federau for Lower Saxony police said police were

[Full-Disclosure] [waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke]

2004-05-08 Thread Janek Vind
{} { [waraxe-2004-SA#028] } {} {

Re: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Georgi Guninski
On Sat, May 08, 2004 at 11:28:07AM -0700, Geoff Shively wrote: HANOVER, Germany (Reuters) - A tip from reward-seekers and information from Microsoft led to the arrest of an 18-year-old suspected of creating the Sasser computer worm, German police and the software giant said on Saturday.

[Full-Disclosure] DEEP SEA PHISHING: Internet Explorer / Outlook Express

2004-05-08 Thread [EMAIL PROTECTED]
Saturday, May 08, 2004 More silliness : A HREF=http://www.microsoft.com alt=http://www.microsoft.com; IMG SRC=malware.gif USEMAP=#malware border=0 alt=http://www.microsoft.com;/A map NAME=malware alt=http://www.microsoft.com; area SHAPE=RECT COORDS=224,21 HREF=http://www.malware.com;

[Full-Disclosure] Registry Watcher

2004-05-08 Thread RandallM
Hi, Any programs out there that watches changes to registry and can give an alert? My intention for this is only because of my limited knowledge of the windows registry. As I understand, no processes, applications, programs run with out entries in to the registry. This it seems includes

Re: [Full-Disclosure] Registry Watcher

2004-05-08 Thread m . garg
[EMAIL PROTECTED] wrote on 05/09/2004 04:30:57 AM: Hi, Any programs out there that watches changes to registry and can give an alert? My intention for this is only because of my limited knowledge of the windows registry. As I understand, no processes, applications, programs run

Re: [Full-Disclosure] Registry Watcher

2004-05-08 Thread Marcel Krause
Hi RandallM wrote: Any programs out there that watches changes to registry and can give an alert? My registry is protected by the Geek SuperHero. You can find it via google. Yours, Marcel ___ Full-Disclosure - We believe in it. Charter:

Re: [Full-Disclosure] Registry Watcher

2004-05-08 Thread Chris Porter
http://www.sysinternals.com/ntw2k/source/regmon.shtml ___ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

Re: [Full-Disclosure] Registry Watcher

2004-05-08 Thread David
RandallM wrote: Hi, Any programs out there that watches changes to registry and can give an alert? Spyboy Search Destroy beta (RC5?) has some of this functionability -- Spybot-SD Resident. So far I have gotten alerts about programs attempting to add startup commands into the registry. I don't

RE: [Full-Disclosure] Registry Watcher

2004-05-08 Thread \Kit\ fulldashdisclosure(at)smallfoxx
Call me crazy, but what about the built-in auditting function? http://www.cert.org/security-improvement/implementations/i028.04.html http://www.winnetmag.com/Article/ArticleID/14742/14742.html Still, as Manu points out, you don't *need* to touch the registry for any reason. It's really just

RE: [Full-Disclosure] Registry Watcher

2004-05-08 Thread Aditya, ALD [Aditya Lalit Deshmukh]
the common installation inserts and all programs have values that must be inserted. If a watcher would have a data base to follow and any odd or uncommon entries could be flagged. As far as I know all newly found viruses insert registry entries and these could be placed in a data base that

RE: [Full-Disclosure] Victory day - Sasser surrenders

2004-05-08 Thread Poof
I was more sarcasm than anything... Meh. It's the computer techs that're paying off the virus writers! They want more money! *sighs* You're kidding there, right? no the person who made the statement below actually oversaw all the details of the transfer! smime.p7s Description: S/MIME