full-disclosure - morning_wood should stop posting xss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: se_cur_ity at hotmail.com (morning_wood)
Subject: morning_wood should stop posting xss

  you are too narrow minded to even speak, broaden your horizons and
accecpt all posibilities Ron. You are showing your ability to not
comprehend the processes and theroetical possibilities... i feel way  sorry
for you.. go read more books Ron.. im sure you will learn even more crap
that keeps you in your little hole...
quit poping out of it mmmkay..
 you might actually see the horizon...

"the sky is falling!!!" poor Chicken Little

wood

> Alright, I'll grant that in these semi restricted environs one might also
> make use of such toys, yet, again, these are not open to to all public
> consumption applications, and a variation on the 'insider threat'
> scenario.  Additionally, if you create false records in a database, and
> monitor and log accesses to those records, the rest of the data is
> probably still available for exploit and consumption, nothing has really
> been stopped or prevented, though it's attempted access might have been
> logged.  Honeypots, in their various forms, are placed for tracking abuse
> and logging of activities for later analysis and perhaps replay, they are
not
> preventive measures, nor are they IDS/IPS kind of systems.  If prevention
> is combined within the toy, then you have created something altogether
> different.
>
>
>
> Thanks,
>
> Ron DuFresne