Re: [funsec] Important Service Announcement

Well sure, there's a mandate that everyone's email be upgraded to HD by Jan. 1 2016. BB On 3/5/15 11:39 AM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > Shaw is my ISP, and has got to have one of the worst spam filtering services > of > anyone. I get to

Re: [funsec] I can haz digital security

If you're looking for Infosec tumblrs... http://securityreactions.tumblr.com/ BB On 2/13/14, 7:57 AM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > http://icanhazdigitalsecurity.tumblr.com/ > > Probably not the greatest source of security awareness posters

Re: [funsec] REVIEW: "World War Hack", Ethan Bull/Tsubasa Yozora

That's some quality crazy, thanks! BB On 5/4/13 11:10 AM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > Date sent:Fri, 03 May 2013 18:13:55 -0700 > From: Blue Boar > >> Why are the threats not attache

Re: [funsec] REVIEW: "World War Hack", Ethan Bull/Tsubasa Yozora

Why are the threats not attached to the reviews for our amusement? BB On 5/3/13 4:07 PM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > BKWWHACK.RVW 20121009 > > "World War Hack", Ethan Bull/Tsubasa Yozora, 2012, 978-0-9833670-8-6 > %A Ethan Bu

Re: [funsec] Gmail Forwarding Logins to YouTube?

Sure you do. It's your gmail login. :) BB On 8/18/12 9:39 AM, Jeffrey Walton wrote: > Hi All, > > It appears GMail is forwarding logins to YouTube. I don't have a > YouTube account, and I would like to supress forwarding my credentials > (or obtaining tokens throu

Re: [funsec] OK, all you EU guys who took the CEH just wasted your money

I'm assuming Germany provides an example as to how tools will be treated. BB On 3/30/12 1:04 PM, valdis.kletni...@vt.edu wrote: > On Fri, 30 Mar 2012 12:46:04 -0700, Vic Vandal said: >> "Ethical" (the "E" in CEH) hackers would only attack systems that belong to >>

Re: [funsec] Certified security awareness

Wait, a cert that requires EVERYONE to get it and not just the security people? Brilliant! They'll make millions. BB On 1/31/12 11:45 AM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > http://www.infosecurity-magazine.com/view/23571/a-call-for-a-new-

Re: [funsec] Did the borg start this way?

It was teledildonics, but no need to quibble. BB On 1/17/12 12:01 PM, Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > http://www.bbc.co.uk/news/technology-16305299 > > == (quote inserted randomly by Pegasus Mailer) > rsl...@vcn.b

Re: [funsec] Best Way to Avoid Virus Infection? Update Your Software

> On Fri, Apr 15, 2011 at 7:53 AM, Blue Boar <mailto:blueb...@thievco.com>> wrote: > > Using unpatched vulns as justification for pushing patching? > >Ryan > > On 4/15/11 5:27 AM, Dan Kaminsky wrote: >

Re: [funsec] Best Way to Avoid Virus Infection? Update Your Software

Using unpatched vulns as justification for pushing patching? Ryan On 4/15/11 5:27 AM, Dan Kaminsky wrote: > Can anyone find the circular definition in this story? It's amusingly > subtle. > > On Fri, Apr 15, 2011 at 4:48 AM, Jeffrey Walton

Re: [funsec] Revealed: Assange ‘rape’ accuser linked to notorious CIA operative

They never show James Bond having to deal with this crap in the movies. BB On 12/8/10 5:20 PM, Paul Ferguson wrote: > Via The Raw Story. > > [snip] > > One of the women accusing WikiLeaks founder Julian Assange of sex crimes > appears to h

Re: [funsec] "University Begins Reporting All P2P Users to the Police"

Coupled with traffic to the other IPs in the swarm (which cannot be securely encrypted, I think?) would probably convince many juries. BB On 11/14/10 6:34 PM, valdis.kletni...@vt.edu wrote: > On Sun, 14 Nov 2010 17:19:57 PST, Blue Boar said: >> T

Re: [funsec] "University Begins Reporting All P2P Users to the Police"

That could help. Tracker is still going to provide a list of IPs participating in each torrent if you ask though, yes? BB On 11/14/10 4:48 PM, valdis.kletni...@vt.edu wrote: > On Sat, 13 Nov 2010 20:17:56 PST, Blue Boar said: >> I&#x

Re: [funsec] "University Begins Reporting All P2P Users to the Police"

I'd be rather surprised if they can spot P2P traffic, but not determine which torrent is being transferred. BB On 11/13/10 7:35 PM, der Mouse wrote: >>> http://torrentfreak.com/university-begins-reporting-all-p2p-users-to-the-police-101112/ >>> http

Re: [funsec] Anybody surprised in the least?

He/She was spotted as a phony pretty much immediately, I was even told the name of the guy behind it within two days of asking on Twitter. I'm interested to see his BH talk. I guess the infosec folks weren't the actual targets? Just there to lend credibility to the fed/gov folks who were?

Re: [funsec] 'Cyber Attack' Aimed At Texas Electricity Provider

Paul Ferguson wrote: > A confidential e-mail obtained by Local 2 explains a "single IP address in > China" tried 4,800 times to log in to the Lower Colorado River Authority's > computer system. In other news, a local power company has reviewed their logs for the first time ever...

Re: [funsec] Miller, Pwn2Own's winner tells Apple, Microsoft to find their own bugs

Larry Seltzer wrote: > First if Microsoft patches include unrelated silent patches then I > would expect, as you say, people would diff the files and examine the > updates to see what it is they are changing They do and they do. Ask Halvar about reversing and finding silent patches. Former Microso

Re: [funsec] big brother at school

Yes... really dumb people sometimes need very explicit boundaries. BB Benjamin Brown wrote: > For what it's worth some good may come out of this in the form of a > positive precedent for other courts to draw upon. > > On Thu, Feb 18, 2010 at 7:50 PM, Dave

Re: [funsec] Facebook Image Privacy

Dan Kaminsky wrote: > On Tue, Jan 19, 2010 at 12:26 AM, Blue Boar wrote: >> Dan Kaminsky wrote: >>> Larry was _specifically_ stating "maybe security through obscurity >>> works after all". That is _specifically_ an argument regarding >>> operatin

Re: [funsec] Facebook Image Privacy

Dan Kaminsky wrote: > Larry was _specifically_ stating "maybe security through obscurity > works after all". That is _specifically_ an argument regarding > operating systems and other designed systems. Where? Here's what I have from Larry in this thread: "A Facebook employee entered a comment th

Re: [funsec] Facebook Image Privacy

Dan Kaminsky wrote: > I am saying operating systems are not like passwords. I don't think > this exactly controversial. Who was talking about operating systems? That smells like at attempt to redefine the argument. We were talking about secret URLs, keys passwords and the like. I think that makes

Re: [funsec] Facebook Image Privacy

Dan Kaminsky wrote: > On Mon, Jan 18, 2010 at 8:39 PM, Blue Boar wrote: >> Dan Kaminsky wrote: >>> Obscurity is not secrecy. >> They're the same thing, just different degrees. >> > > Used to think the same, actually. But if you look at what obscur

Re: [funsec] Facebook Image Privacy

Dan Kaminsky wrote: > Obscurity is not secrecy. They're the same thing, just different degrees. BB ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funs

Re: [funsec] When are we going to start profiling? WAS RE: Don't spend too much time in the bathroom...PLEASE

Tomas L. Byrnes wrote: > It used to be that security was run by the airlines, and many of the > policies that were in place then were adopted by the TSA. IS that agreement that it's a government body imposing restrictions rather than private airlines, then? > How who paid for it is relevant to th

Re: [funsec] When are we going to start profiling? WAS RE: Don't spend too much time in the bathroom...PLEASE

private entities trying to make a profit. > > >> -----Original Message- >> From: Blue Boar [mailto:blueb...@thievco.com] >> Sent: Tuesday, December 29, 2009 2:02 PM >> To: Tomas L. Byrnes >> Cc: RandallM; funsec@linuxbox.org >> Subject: Re: [funsec]

Re: [funsec] When are we going to start profiling? WAS RE: Don't spend too much time in the bathroom...PLEASE

Tomas L. Byrnes wrote: > No-one has a RIGHT to get on an airplane (or to enter an airport, for > that matter). Why not? BB ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/f

Re: [funsec] Why it sucks to live in Southern Chile

But they said if we quit using hair spray, that would fix it! Damn you liberals, you killed hair metal! BB Alex Eckelberry wrote: > New pics from NASA, shows the ozone hole since 1979: > > > > http://earthobservatory.nasa.gov/Features/WorldOfChange/ozo

Re: [funsec] Rethinking FUNSEC

http://seclists.org/funsec/ BB Michael Graham wrote: > Ya if someone were to publicize funsec, what the hell would larry have > left for his column? > > Sorry but this material has already been commercialized please find other. > > On Thu, Nov 19, 2009 at

Re: [funsec] RIP str0ke

We doing this on-list? :) I've been really busy. Job and raising teenagers is kicking my butt. BB Adriel T. Desautels wrote: > I was being a wise ass... :) > > How you been by the way? > > On Nov 4, 2009, at 11:43 AM, Blue Boar wro

Re: [funsec] RIP str0ke

give us a definitive answer. BB Adriel T. Desautels wrote: > And you're going to trust twitter? > > > On Nov 4, 2009, at 11:31 AM, Blue Boar wrote: > >> He's claiming alive status on Twitter: >> http://twitter.com/str0ke >> >>

Re: [funsec] RIP str0ke

He's claiming alive status on Twitter: http://twitter.com/str0ke BB Adriel T. Desautels wrote: > Because I'm all torn up inside and I can't accept the truth as it is. > > On Nov 4, 2009, at 10:11 AM, Jon Kibler wrote: > > Adriel T. Desautels wrote: H

Re: [funsec] first fallacy of Internet solutions

Assuming the new security standard will be implemented securely. BB Gadi Evron wrote: > First fallacy of Internet solutions: getting everyone (or many) on the > Internet to agree to, or implement, something. > > Second? > > Gadi. >

Re: [funsec] Don' see no "security expert's" round here ...

Any security consultants ever lost business over getting hacked themselves? BB Robert Graham wrote: > Mitnick is a security expert. I don't have much respect for the guy, and his > reputation is more hype than reality, but he's still an "expert" every muc

Re: [funsec] Capital One Says Its e-Mail 'Too Important to be Spam'

A little Internet Death Penalty therapy, perhaps? BB Paul Ferguson wrote: > "We bring these offers to customers as part of our customer agreement and > therefore do not provide a means to prevent this valuable information from > reaching them," the

Re: [funsec] funsec members twitter accounts

http://twitter.com/ryanlrussell ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.

Re: [funsec] New bill aims to force cell camera sounds, protect children

They're new and scary and teenagers use them. Damn teenagers. BB Jeff Rosowski wrote: >>> How the hell does this "protect children" though? >> Umm... when they take naked pictures of themselves to send to their >> boy/girl/whateverfriends, their parents

Re: [funsec] Apparently Milgram is still right

It's not the volts, it's the amps. BB Tomas L. Byrnes wrote: > The experiment is a dual one: > > 1: How far can someone be manipulated. > > 2: Are people really such sheep? > > My unscientific gut says that if you took the sample primarily from the > US

Re: [funsec] Fwd: [ISN] Experiment highlights computer risks

http://www.usatoday.com/money/industries/technology/2004-11-29-honeypot_x.htm Their counts seem low. But their standard seems to be "unusable". They acknowledge probes in 30 seconds, and an "attempt" in 2 minutes... Makes a huge difference if they're using an OS with a firewall on by default or n

Re: [funsec] UK: Passports Will Be Needed to Buy Mobile Phones

We haven't exercised all the options yet. BB Drsolly wrote: > Didn't work though, did it. > > On Sun, 19 Oct 2008, Tomas L. Byrnes wrote: > >> Hence the reason the founders of the US, Englishmen all until the >> Declaration of Independence, felt the need to expli

Re: [funsec] Palin's Email hacked and placed on wikileaks.org

http://wikileaks.org/wiki/Sarah_Palin_Yahoo_inbox_2008 Gadi Evron wrote: > Hat tip to @bkdelong > ___ > Fun and Misc security discussion for OT posts. > https://linuxbox.org/cgi-bin/mailman/listinfo/funsec > Note: funsec is a public and open mailing list

Re: [funsec] The right to bear arms & make salad

Nicely done sir. ryanlrussell:~ ryanlrussell$ perl -e "print ord('g')^ord('f'),\"\\n\"" 1 BB [EMAIL PROTECTED] wrote: > On Tue, 22 Jul 2008 18:24:50 PDT, Blue Boar said: > >> ryanlrussell:~ ryanlrussell$ perl -

Re: [funsec] The right to bear arms & make salad

Daniel H. Renner wrote: > [EMAIL PROTECTED] wrote: >>> From: "Daniel H. Renner" <[EMAIL PROTECTED]> >>> To: >>> Sent: Tuesday, July 22, 2008 9:53 PM >>> Subject: Re: [funsec] The right to bear arms & make salad >>> >>> And, of course, "everyone knows"... >> Everyone knows Gadi meant to call this l

Re: [funsec] The right to bear arms & make salad

Richard M. Smith wrote: > The murder rate in the U.S. has dropped a good bit in the ‘90s because > we are putting more people in prison. How did you determine the causality on that? BB ___ Fun and Misc security d

Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: >> Binary programs would not be able to branch based on data? > > Not certain about that. I don't think anything in HA would prevent > interactivity, > but certainly nothing input would be submitted to the program store, and > therefore > c

Re: [funsec] Texas Bank Dumps Antivirus for Whitelisting

Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > Harvard architecture, unlike von Neumann architecture, had a strict > separation of > progrma and data store and representation. It would have been impossible for > a > program to modify its own or other executable material. Data was not

Re: [funsec] Palm Beach County Sheriff's officials introduce ComputerCOP software to monitor children's internet use

Lovely, the same company whose software was used to help convict Julie Amero. BB Richard M. Smith wrote: > > Palm Beach County Sheriff's officials introduce ComputerCOP software > to monitor children's internet use

Re: [funsec] Sharper satellite images coming

100% of surveillance will eventually be used for looking at boobs. BB Juha-Matti Laurio wrote: > They can see us, but we will not see the pictures: > > "Next month, a commercial satellite company is scheduled to launch an > Earth-orbiting satellite that w

Re: [funsec] Hacking is wrong, but abuse of process is wronger ...

Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > This bothers me. A lot. It's too much like security theatre, as well as > being flat- > out immoral. He did something wrong: he should be punished. But he should > be > convicted properly, and punished appropriately, not intimidated into

Re: [funsec] Wife convicted after husband fatally shoots lover

Alex Eckelberry wrote: > Not quite sure I understand. Picture the following scenario: > > You come home and see your wife getting "raped" in a pickup truck. > > You shoot the "rapist" to save your wife. > > And then you go to prison? Well, he went to trial and wasn't convicted. The wife is

Re: [funsec] DefCon 'Race to Zero'

[EMAIL PROTECTED] wrote: > Now there is a very common misconception if it comes to malware and > security. Viruses and Trojans don't try to exploit any vulnerabilities > that need to be fixed, they simply take advantage of features offered by > the OS (modifying files, creating files, establishing

Re: [funsec] Land of the free laptop search

I think that came up in the original case, or a similar one. If you decline to provide your password, you have the options of leaving it with customs for however many weeks they need to complete their examination. BB Jacob Appelbaum wrote: > Robert Slade

Re: [funsec] [Full-disclosure] a song about me? :P [was: Vulnerability Release: CKFD001-CHATX]

See what I mean? Mine are lame. BB jf wrote: > wouldnt he have to get owned and then fired to be on the same scale? > > On Wed, 23 Apr 2008, Blue Boar wrote: > >> Date: Wed, 23 Apr 2008 15:08:28 -0700 >> From: Blue Boar <[EMAIL PR

Re: [funsec] a song about me? :P [was: Vulnerability Release: CKFD001-CHATX]

I know... your haters are better than mine ever were. BB Gadi Evron wrote: > At first I thought having a fan blog of someone who hates me was cool. > > Then I thought the comic strip was cool, but man... > > I like the guitar, even if the guy does like Hitler. >

Re: [funsec] Bad Idea of The Week: 'Friendly Botnets'

Possibly more of a bad name. I don't see anything inherently evil in distributed front-end proxies. Doubtful how workable it is, though. BB Paul Ferguson wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > Via New Scientist. > > [snip] > > Beat

Re: [funsec] Microsoft: Vista feature designed to 'annoy users'

. Maybe in Windows 7, where they are threatening to break compatibility with Win32. BB Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > Date sent:Sat, 12 Apr 2008 12:45:43 -0700 > From: Blue Boar <[EMAIL P

Re: [funsec] Microsoft: Vista feature designed to 'annoy users'

Indeed. Vista is fixing shatter attacks for older versions of Windows, too. Vista finally forces you to deal with system processes that try to interact with users. BB Larry Seltzer wrote: > Good. I don’t know another way to get people out of the administr

Re: [funsec] Careful of them other bots ...

Hey, new DefCon Bots challenge for this year... BB Rob, grandpa of Ryan, Trevor, Devon & Hannah wrote: > http://www.networkworld.com/community/node/25439 > > "With the current prices of robot construction falling dramatically and the > availability of ready-made

Re: [funsec] Completely insane Myspace blackmail story

I read the thread after you posted the link. I smell hoax, but I want to believe. Ryan Paperghost wrote: > "Hi, about 4 hours ago my girlfriend called me saying there was an idiot that > took over her Yahoo! Messenger ID and MySpace profile. > [snip] > >

Re: [funsec] death of "Dude" brings out the "Rude"

Randy Mueller wrote: > Wow. It is amazing to read the out right disrespect for another’s life > and rights. > > I’m stunned. Almost speechless. And yet, I like to think that JP would have enjoyed giving them one last reason to demonstrate that they have no class.

Re: [funsec] wow? for real?!

Dude VanWinkle wrote: > lol, Good point I know a few ppl who would be willing to drag him that far.. If a convicted criminal tried to move himself into my house with my 16-year-old daughter, I'd be more than happy to drag him that far and stand on his neck until the police arrived.

Re: [funsec] wow? for real?!

Brian Loe wrote: > But the couple claim the first they knew about it was when Sims, a > friend of their daughter, moved in on Thursday - followed by > security contractors who put a box in a bedroom to monitor his > movements with an ankle tag. Sims' tag keeps him indoors between 7p

Re: [funsec] A guitar with an Ethernet port

Kurt Grutzmacher wrote: > tuning robot this $2k guitar includes an embedded ethernet port to Sweetwater begs to differ: http://www.sweetwater.com/store/detail/LPDGBMNH/ Too bad. $2K was in the realm of possible. $4-6K, not so much. BB _

Re: [funsec] Naughty Comcast

[EMAIL PROTECTED] wrote: > On Fri, 19 Oct 2007 08:43:18 PDT, Blue Boar said: >> I took that to mean they were injecting RST packets, ala the great >> Firewall of China. > > Forged RST packets meet my definition of "injecting bad data" Shoul

Re: [funsec] Naughty Comcast

I took that to mean they were injecting RST packets, ala the great Firewall of China. BB [EMAIL PROTECTED] wrote: > On Fri, 19 Oct 2007 10:06:07 CDT, Brian Loe said: > >> My ISP has been throttling P2P traffic for a couple of years now... > > "It involves

Re: [funsec] Security Theater: Most Fake Bombs Missed by Screeners

Brian Loe wrote: > I know better but I'm going to ask anyway: what security steps would you > take to prevent armed men from overtaking another airplane? None. I would do away with the silliness and let them try from time to time. If it gets to the level where it's actually a problem, revisit.

Re: [funsec] While we're talking about the 1st amendment...

Google actually has a court loss to back this up: http://www.news.com/2100-1030_3-5564118.html BB Larry Seltzer wrote: > http://www.examiner.com/a-983100~Robert_Cox__Google_bans_anti_MoveOn_org_ads.html > > > Internet giant Google has banned advertis

Re: [funsec] too beautiful not to share

[EMAIL PROTECTED] wrote: > So which is morally worse - selling them one weapon that will kill 1,000 > people, or selling them 1,000 weapons that will each kill one person? Assuming that selling them is wrong, and that using them to kill is wrong, then 1 weapon that kills 1,000 is worse, unless the

Re: [funsec] WTF?

Alex Eckelberry wrote: > It's pretty scary when someone actually trained in the law can make such > an astounding statement. Copyright law is a completely artificial fabrication, and the large publishers have been very successful with changing it to suit their interests. She's just 5 years early.

Re: [funsec] Evil Internet, yet again

Richard M. Smith wrote: > EU mulls Internet clampdown to combat 'terrorism' > > http://www.breitbart.com/article.php?id=071001154843.cjbfw3h8&show_article=1 > > > European Union interior ministers debated Monday pro

Re: [funsec] The south rises again!

-world >harm or severe disruption. > > Using even this rather broad defintion, there have been very few real world > cyberterrorism attacks. > > Richard > > > -Original Message- > From: Blue Boar [mailto:[EMAIL PROTECTED] > Sent: Thursday, September

Re: [funsec] The south rises again!

Who was he trying to make terrified? BB [EMAIL PROTECTED] wrote: > Could this be an actual case of cyberterrorism? Knocking out people's > telephone service is a big no-no isn't it? > > Richard > > >> Redneck Ragin' >> >> from: >> http://www.bizjournals.com/atl

Re: [funsec] old news - but not here

Drsolly wrote: > I think your point here is that women's bare chests are naughty, and men's > aren't. And you can't see that this is just a cultural idea, not an > absolute. > > And somehow, you've decided that to be human, you must be able to show > your face. The point is: Is there such a th

Re: [funsec] A Jew in a German Camp

Nah, you're the Jew, so no one is allowed to be offended. Plus, self-Godwininng thread. BB Gadi Evron wrote: > A few days ago I replied on the Italian post, as I just finished up > writing a blog entry which was largely about how much fun Italians are > (a

Re: [funsec] WHAT TIMING!!

Oliver Schneider wrote: > However, this leaves us with only one final question: how do we > change people to not use the guns to kill Train them on alternative methods? It always boils down to training, doesn't it? BB __

Re: [funsec] hehe...

Obviously the solution is more cocaine. BB Richard M. Smith wrote: > Yep, unfortunately we lead the world in drug abuse problems also: > >http://www.unodc.org/pdf/research/wdr07/WDR_2007.pdf > >The USA remains the world's largest cocaine consumer, > >

Re: [funsec] A fun security experiment with the TSA

security curmudgeon wrote: > As for the spot checks, I get them about 50% of the time. If you were on > a watch list, i'd imagine you would get them all the time and be > questioned heavily before passing the screening check. Do you travel with > any computer equipment in your luggage? When I ha

Re: [funsec] SourceFire buys ClamAV

C Q wrote: > Nmap's license is horrible... Even using nmap output > implies a derived work (I might be thinking of something > else, so please correct me if I'm mistaken)... But because > Fyodor is not trying to commercially benefit from it there > isn't as much fuss about it where in case of Nessu

Re: [funsec] elliptic-curve cryptography, are we ready?

coderman wrote: > SHA2 please :) [sha1 has been broken down to 2^69 or less, instead of > the desired 2^80 collision resistance...] For non-chosen birthday collisions. Not quite there yet, but on its way. Unless it has gotten worse since I last heard? BB _

Re: [funsec] Gang Kidnaps Gamer to Get Password Using Fake Orkut Date

Paul Ferguson wrote: > Surprisingly enough, after five hours the hostage wasn't talking. The group > leader had a gun against his head all that time but the guy didn't say a > word. At that point, the crooks gave up and decided to let him go. The > brazilian police then caught the four suspects, ag

Re: [funsec] UK bomb car tracked by highway license plate scanners

Brian Loe wrote: > Until AI has evolved to the point that we can remove humans from > positions of power and judgement, replacing them with non-feeling, > incorruptible machines, we have to live with the fact that every > system is flawed and the more power you give that system the more > flawed it

Re: [funsec] NZ: Banks Demand a Look Inside Customer PCs in Fraud Cases

Dennis Henderson wrote: > I guess the person who invents the perfectly secure internet > transaction will be the richest person on the planet. Imagine being > able to conduct a secure pc based internet transaction with every kind > of trojan and keylogger installed Designed one, I don't think

Re: [funsec] Birds vs. People (This planet ain't big enough for the both of us)

Richard M. Smith wrote: > Does the ever-increasing human population represent a security problem? Yes. An increased general population means an increased victim population. And it looks to me like certain classes of computer "attacks" rise exponentially compared to victim population. (Think: phis

Re: [funsec] Spam King arrested

Steve Manzuik wrote: >> This arrest is all well and good, but the spam keeps coming. >> >> I wonder why that is [highly loaded question]? ;-) > > I think the obvious answer here is because spam is too profitable. > Arrest someone and there is a lineup of people waiting to take his or > her place.

Re: [funsec] Blogger unmasked, court case upended

Richard M. Smith wrote: > Was Lindeman Flea? In case anyone else is curious: http://www.google.com/search?hl=en&safe=off&q=site%3Adrfleablog.blogspot.com%2F+&btnG=Search You have to use the Google cache. The blog is otherwise a bit devoid of content today.

Re: [funsec] Quote of the Day: Bruce Schneier

Brian Loe wrote: > Wow, I didn't expect an answer. Its a silly idea that a country can > export "lifestyle and culture" - at best, it can import it. So, a country can't export culture, but another country can import it? I find your ideas intriguing, and would like to subscribe to your newsletter.

Re: [funsec] UK: Drivers may be banned from smoking at the wheel

Brian Loe wrote: > How do you punish someone for something they were going to do? Or > worse, MIGHT have done? A group of three precogs? Should be foolproof. BB ___ Fun and Misc security discussion for OT posts. h

[funsec] Firearm Owner's Identification card issued to 10-month-old baby

http://www.dailysouthtown.com/news/383197,dst-nws-d13.article Why yes, I *am* trolling. I'm betting you people can't resist anyway. BB ___ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bi

Re: [funsec] BaySec

nything other than a > cluster fuck. > > the Z is a fantastic place if its during daylight hours. Its a biker bar > and there are lots of rough but friendly types. I hope the organizers > will reconsider their time of the gathering. > > -rick > > > > > Blue Boar wr

[funsec] BaySec

Matasano-style informal get together in San Francisco on May 16: http://ryanlrussell.blogspot.com/2007/05/baysec.html http://raffy.ch/blog/2007/05/02/baysec-meeting-on-may-16th-2007/ http://rdist.root.org/2007/05/01/baysec-meetup-on-may-16/ If you're in the area, I expect to see you there! ;)

Re: [funsec] Boston's police patrols gaining bird's-eye view; To ride in copters with state troopers

[EMAIL PROTECTED] wrote: > "I'm told they have an uncanny ability to identify a suspect leaving a crime > scene," Linskey added. "It's the guy not looking up at the helicopter, > walking away with his head tucked down." Hey, I bet he's right. The probably would have worked on me, at least until he

Re: [funsec] Telnet: Dead at 35 - Happy Birthday and RIP

I guess you didn't read the article linked, and see that Poulsen referred people to Microsoft's instruction on how to install it if they want? BB Larry Seltzer wrote: >>> You obviously meant to call Poulsen a "Dummy" > > Yes I did, sorry if it came across otherw

Re: [funsec] MS Patch Coming Tuesday

http://blogs.technet.com/msrc/archive/2007/04/01/latest-on-security-update-for-microsoft-security-advisory-935423.aspx Larry Seltzer wrote: > http://www.microsoft.com/technet/security/bulletin/advance.mspx > > Microsoft Security Bulletin Advance Notification > Updated: April 1, 2007 > > As part

Re: [funsec] another one bites the dust (SHA-1)

Gadi Evron wrote: > http://en.epochtimes.com/tools/printer.asp?id=50336 Not a very good article on the topic, which is something like a year old now. SHA-1 isn't nearly as broken as MD5, so far. The US Government was scheduled to replace SHA-1 even before she came up with the better attack. As I

Re: [funsec] Default Password List

I think we started in 2000: http://archives.neohapsis.com/archives/vuln-dev/2000-q3/thread.html BB Michal Zalewski wrote: > On Mon, 26 Feb 2007, Fergie wrote: > >> http://www.phenoelit.de/dpl/dpl.html > > Welcome... to the world of 2002! > > ;-) > > /mz >

Re: [funsec] from the windows secrets newsletter

Brian Loe wrote: > Pop-up ads can land you in jail > By Ryan Russell > > "If you find yourself the victim of pop-up ads on a computer, with > children in the vicinity, you could face decades in prison. > > I wish that I was exaggerating or being sensationalistic, but for > Julie Amero this is far

Re: [funsec] hehehehe - wierd Jim Christy article

Told ya! ;) BB Gadi Evron wrote: > http://www.wired.com/wired/archive/15.01/cybercop.html > > Read the first few paragraphs and you will understand why I find it so > amusing. :) > > Gadi. > > ___ > Fun and Misc security

Re: [funsec] SWIFT: A Security Researcher Gets Offered The Big Score

Fergie wrote: > A few years ago, a security researcher living overseas was contacted by a > man with an intriguing offer: The researcher would get 2.2 million euros > (more than $2.8 million) for each financial services firm he helped the man > and his group of cybercriminals infiltrate. All the re

Re: [funsec] Security 'Experts' Aren't So Secure At RSA Conference

Fergie wrote: > Those devices had been set up to link to insecure wireless access points, > like those found at hotels and Starbucks cafes. The problem, says Richard > Rushing, CSO of AirDefense, is that when they are done using the > connection, they don't change the device's policy settings that

[funsec] myspace makes GoDaddy take out Fyodor

http://blog.wired.com/27bstroke6/2007/01/myspace_alleged.html Follow up: http://blog.wired.com/27bstroke6/2007/01/godaddy_defends.html Summary: Fyodor's full-disclosure mailing list archive had the myspace password list. Days later, myspace figures this out, goes straight to his registrar, GoDaddy

Re: [funsec] class-president-hacks-school-grades

RMueller wrote: > Student hacks to change grades! > > http://www.darknet.org.uk/2007/01/class-president-hacks-school-grades/ > > On a side note: Remember the conversation about "Educating" users? The next > generation is coming. What about security then. Sounds like the next generation has the s

  1   2   >