[Full-Disclosure] Supposed SaS "encryption" weak - Coments and Infor about wrong claims

2003-10-15 Thread Lorenzo Hernandez Garcia-Hierro
Dear Paul, I've testing your exploit ( good one ) for the supposed html encryption weak of SaS. I think yo toke the exploit/perl script from a developers site because SaS is using an standard of encoding, here is the proof : variables for function _fwk_filter_encrypt($content) $table = "0123456789a

Re: [Full-Disclosure] Supposed SaS "encryption" weak - Coments and Infor about wrong claims

2003-10-15 Thread Lorenzo Hernandez Garcia-Hierro
CK ). - Original Message - From: "petard" <[EMAIL PROTECTED]> To: "Lorenzo Hernandez Garcia-Hierro" <[EMAIL PROTECTED]> Cc: "Full-Disclosure" <[EMAIL PROTECTED]> Sent: Wednesday, October 15, 2003 8:10 PM Subject: Re: [Full-Disclosure] Supposed Sa

Re: [Full-Disclosure] Supposed SaS "encryption" weak - Coments and Infor about wrong claims

2003-10-15 Thread petard
On Wed, Oct 15, 2003 at 07:05:35PM +0200, Lorenzo Hernandez Garcia-Hierro wrote: > Dear Paul, > I've testing your exploit ( good one ) for the supposed html encryption weak > of SaS. > I think yo toke the exploit/perl script from a developers site because SaS > is using an standard of encoding, > h

Re: [Full-Disclosure] Supposed SaS "encryption" weak - Coments and Infor about wrong claims

2003-10-15 Thread KF
Heh watch out for that DMCA. -KF Lorenzo Hernandez Garcia-Hierro wrote: Dear Paul, I've testing your exploit ( good one ) for the supposed html encryption weak of SaS. I think yo toke the exploit/perl script from a developers site because SaS is using an standard of encoding, here is the proof : v

Re: [Full-Disclosure] Supposed SaS "encryption" weak - Coments and Infor about wrong claims

2003-10-15 Thread Valdis . Kletnieks
On Thu, 16 Oct 2003 02:35:27 EDT, KF <[EMAIL PROTECTED]> said: > Heh watch out for that DMCA. 17 USC 1201 (a)(1)(A) says: No person shall circumvent a technological measure that effectively controls access to a work protected under this title. The prohibition contained in the preceding sentence

Re: [Full-Disclosure] Supposed SaS "encryption" weak - Coments and Infor about wrong claims

2003-10-16 Thread Nick FitzGerald
[EMAIL PROTECTED] wrote: > No person shall circumvent a technological measure that effectively controls > access to a work protected under this title. The prohibition contained in the > preceding sentence shall take effect at the end of the 2-year period beginning > on the date of the enactment of