RE: [Full-Disclosure] MS web designers -- "What Security Initiative?"

2004-06-12 Thread Morning Wood
logging into hotmail.com via the web i am now presented with "When-u-save" offer to install this worthless SPYWARE. ref: http://www.pestpatrol.com/PestInfo/w/whenusave.asp this is nearly as bad as malware deposited by browser bugs in IE that M$ is going after with such force as detailed in http

Re: [Full-Disclosure] PestPatrol (was: !! Internet Explorer !!)

2004-06-12 Thread yossarian
It actually does a reasonable job at remvoing and preventing some items more generally accepted being pests other than whitepapers on mostly harmless hacking. They juist have a different view what pests are, including documents on making bombs and picking locks. Probably things you don't want on co

Re: [Full-Disclosure] MS web designers -- "What Security Initiative?"

2004-06-12 Thread Dave Horsfall
On Sat, 12 Jun 2004, David Maxwell wrote: > For years, Microsoft has had a policy of announcing products that don't > exist yet, to cause customers to stop buying a competitor's product. > That's Vapourware. Hah - M$ is new at that game. IBM did it for years back in the 70s. -- Dave __

[Full-Disclosure] PestPatrol (was: !! Internet Explorer !!)

2004-06-12 Thread Michal Zalewski
On Sat, 12 Jun 2004, Syed Imran Ali wrote: > Get Pest Petrol... Hmm, I always thought PP is some sort of an elaborate scam ;-) Not relying on Windows too badly, I never had to use the product, but PP page frequently comes up when googling for weirdest things. Consider these "exploits" PP detects

RE: [Full-Disclosure] !! Internet Explorer !!

2004-06-12 Thread Syed Imran Ali
Get Pest Petrol... Regards, S. Imran Ali -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Farrukh Hussain Sent: Friday, June 11, 2004 7:35 PM To: [EMAIL PROTECTED] Subject: [Full-Disclosure] !! Internet Explorer !! Hey, Yesterday i was visitng web

[Full-Disclosure] Re : Subversion <= 1.04 Heap Overflow ExploiT ?

2004-06-12 Thread ElviS .de
ned [EMAIL PROTECTED] wrote :   >There once was some open src code,>that claimed it would lighten your load,>it took a little fuzzing,>and i came out buzzing,>as it crashed in svn:// mode.   is this exploit for this vulnerability ??http://www.k-otik.com/exploits/06112004.subexp.c.php   Steph.   D

Re: [Full-Disclosure] MS web designers -- "What Security Initiative?"

2004-06-12 Thread David Maxwell
On Sat, 12 Jun 2004, Nick FitzGerald wrote: > The MS Security Initiative is an utter sham. Good comments about continued web-cluelessness omitted. > At the outset of the Security Initiative the skeptics largely said > "it's a marketing ploy", but its defenders said "it will take time for > the

[Full-Disclosure] MS web designers -- "What Security Initiative?"

2004-06-12 Thread Nick FitzGerald
The MS Security Initiative is an utter sham. I commented on the uselessness of the "new, improved" MS Security Bulletin web pages when they were "upgraded" to .mspx form. In doing so I rather rudely pinned the blame for the unusability of the new Security Bulletin pages on the MSRC staff -- as