[Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-23 Thread Matsu Kandagawa
-BEGIN PGP SIGNED MESSAGE- Thanks to Roesch's magnificent sentence-parsing spin job yesterday, like the rest of you, I'm quite sure that, quote, "there is no trojan in Snort". But unless I grossly misread the statements from Phrack, the central issue at hand was the introduction of delibe

RE: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-23 Thread Zach Forsyth
> -Original Message- > From: Matsu Kandagawa [mailto:[EMAIL PROTECTED] > Sent: Wednesday, 24 September 2003 8:24 AM > To: [EMAIL PROTECTED] > Subject: [Full-Disclosure] An open question for Snort and > Project Honeynet A whole lot of crap Phrack 62 has not been offi

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-23 Thread Blue Boar
Matsu Kandagawa wrote: Matsu. "who must be just some zit-faced chink PHC kid posting trolls from his mother's basement". Seems the most likely case, doesn't it? A name that sounds like it might be real, but Google has never heard of it, nor the email address. Sent from a free, anonymizing email

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-23 Thread northern snowfall
In sum, "Everybody relax"-- the eternal refrain of the con artist-- might be good enough for people likely to be swayed by such assurances (or those who prefer to stick their heads in the sand to avoid unpleasant truths) but unfortunately for you, some of the people you've been working with deman

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-24 Thread Matsu Kandagawa
-BEGIN PGP SIGNED MESSAGE- Sorry, I must have missed it: where are the answers to my questions about the "off-by-one's, integer overflows, and logic bugs" m1lton alluded to? Where did anyone explain away why Sneeze won't work and why the idea that Sebek, Honeyd and VMWare are egregiously d

RE: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-25 Thread Schmehl, Paul L
September 24, 2003 2:30 PM > To: [EMAIL PROTECTED] > Subject: Re: [Full-Disclosure] An open question for Snort and > Project Honeynet > > > -BEGIN PGP SIGNED MESSAGE- > > Sorry, I must have missed it: where are the answers to my > questions about the "off-

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-25 Thread Matsu Kandagawa
-BEGIN PGP SIGNED MESSAGE- From: Schmehl, Paul L (pauls_at_utdallas.edu) Date: Sep 25 2003 >One more in the idiot bin The fact that the best you can do is call me an idiot for having the temerity to raise deadly serious issues says a lot more about you than it does me. It might be okay

RE: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-25 Thread Ma tsu Kan daga waga
To the skilled but flawed fake at http://www.phrack.nl/phrack62/ and your mail Mr. Rueubens. > >Do any of you have anything to say about that? When you say "look for >yourself" surely you don't mean to claim that Average Joe Admin has the >requisite skillset and detailed knowledge necessary to spo

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-25 Thread madsaxon
At 04:18 PM 9/25/03 -0400, Matsu Kandagawa wrote: All the while wishing I could spit in your face. For the life of me, I cannot fathom why people devote so much time and mental effort to assassinating each others' character publicly in this forum. Let's just get this out of the way once and for al

RE: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-26 Thread Matsu Kandagawa
-BEGIN PGP SIGNED MESSAGE- wtfeva: Whoever you are, thank you for taking the trouble to reply to me. If I would have read anything resembling your comments before I posted, it sure would have saved a lot of hot air. Too bad the press didn't use anything like it. >The remaining question

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-26 Thread Blue Boar
Matsu Kandagawa wrote: Ironically, your comment re. "if you find something publish it" is at the heart of the problem: I literally can't. In any event, if you'd care to wax equally poetic while vouching for the non-detectability and Who is making a "non-detectability" claim, and in what context? I

Re: [Full-Disclosure] An open question for Snort and Project Honeynet

2003-09-27 Thread Matsu Kandagawa
-BEGIN PGP SIGNED MESSAGE- > Who is making a "non-detectability" claim, and in what context? I have > no reason to claim that no one has, I just haven't seen it. > > BB Fair enough, but I sure haven't seen anyone doing much to point out th