[Full-Disclosure] A funny (but real) story for XMAS

2003-12-15 Thread Tri Huynh
Hi list, One day when I checked my email, I received many emails from a company named wickedservers.com (which is belong to another company called IOport Technologies, LLC). Here is one of their emails : " Your e-mail has been received. A ticketnumber has been created. Would you like to corresp

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Christopher Parker
--- Tri Huynh <[EMAIL PROTECTED]> wrote: > It looks like this comapany doesn't give a damn about information > privacy, and there is also a possibility that they are > the spammers too. If you guys have have any info about this > company, please contact [EMAIL PROTECTED] and i love > to gather more

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Cael Abal
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 |> "Join www.osvdb.org to make a better non-corporated vulnerability |> database since CERT sucks ! " | | CERT sucks? Humm... In my UNIX & Security college course, we're being | told CERT is a great resource for security-related information. Can | anybo

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Jeffrey . Stebelton
I agree with your professor. I don't use the CERT site on a daily, or even weekly basis like I do sans.org, but when I need information from it, it's always been relevant, accurate (as far as I can tell) and up to date. What exactly is supposed to "suck" about the site, I wonder?? Jeff Stebelton

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Ron DuFresne
None of this should be surprising, especially in the US where rivacy issues are not well understood, nor is there great concern at present in regards to it. When data bases of corporate giants can be hacked and disclose private info of millions, and little fiallout follows, and even governement

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread madsaxon
At 09:38 AM 12/16/2003 -0500, [EMAIL PROTECTED] wrote: What exactly is supposed to "suck" about the site, I wonder?? I don't know that anyone believes the site itself "sucks." There are those who have an objection to the fact that CERT is taxpayer-funded, yet charges a fee for its 'premium' service

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Exibar
EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Tuesday, December 16, 2003 8:03 AM Subject: Re: [Full-Disclosure] A funny (but real) story for XMAS > --- Tri Huynh <[EMAIL PROTECTED]> wrote: > > It looks like this co

RE: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Schmehl, Paul L
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Cael Abal > Sent: Tuesday, December 16, 2003 7:58 AM > To: [EMAIL PROTECTED] > Subject: Re: [Full-Disclosure] A funny (but real) story for XMAS > > -BEGIN PGP SIGNED M

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread KF
What exactly is supposed to "suck" about the site, I wonder?? I will certainly say they way they handled our issues with HP / Tru64 / non-executable stack and the things that lead up to our DMCA threat certainly left me with a bad taste in my mouth... It took several emails followed by 4

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Gregory A. Gilliss
Chris, CERT does not "suck" anymore than Microsoft "sucks" or Bush "sucks". CERT is a resource, albeit not a timely one. Consider - Saddam is captured. Who knows first? The people who actually capture him. Who knows next? The people whom the first group tells. Who knows next? Probably Fox News (th

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Ron DuFresne
of course, CERT, like many federal sites realted to net sec issues, NIPC, local infrgard chapters, the new homeland sec dept, all will know after all the sources below have first fed on the info and rumors for a week or too prior. So, if CERT truely sucks, it sucks slowly... Thanks, Ron DuFresn

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-16 Thread Kurt Seifried
> The reason OSVDB isn't well populated yet is that each > vulnerability has to be evaluated and written up afresh > in order to avoid violating any existing DB's copyrights. > That takes time. If you want to shorten that time, go > volunteer. :-) I like the idea of osvdb, I have concerns about t

RE: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-17 Thread Chris DeVoney
> > of course, CERT, like many federal sites realted to net sec > issues, NIPC, local infrgard chapters, the new homeland sec > dept, all will know after all the sources below have first > fed on the info and rumors for a week or too prior. So, if > CERT truely sucks, it sucks slowly... CER

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-18 Thread proidg
8:58 AM Subject: Re: [Full-Disclosure] A funny (but real) story for XMAS > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > |> "Join www.osvdb.org to make a better non-corporated vulnerability > |> database since CERT sucks ! " > | > | CERT sucks? Humm... In my UNIX

Re: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-18 Thread Valdis . Kletnieks
On Tue, 16 Dec 2003 05:03:58 PST, Christopher Parker said: > CERT sucks? Humm... In my UNIX & Security college course, we're being told CERT is a > great > resource for security-related information. Can anybody else make a comment on this? > Agree? > Disagree? What they teach you in college abo

RE: [Full-Disclosure] A funny (but real) story for XMAS

2003-12-18 Thread Bill Royds
Behalf Of [EMAIL PROTECTED] Sent: December 16, 2003 11:31 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] A funny (but real) story for XMAS On Tue, 16 Dec 2003 05:03:58 PST, Christopher Parker said: > CERT sucks? Humm... In my U