full-disclosure - morning_wood should stop posting xss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: morning_wood should stop posting xss 

On Thu, 24 Jul 2003 12:33:20 PDT, "Altheide, Cory B." <AltheideC@...doe.gov>  said:
> Point of order: To be a honeypot the vulnerability would have 
> to be on a system that served no other purpose, despite what 
> ISS would have you believe.

OK.. I'll bite.... are you saying:

A) Morning's website is useless?
or
B) Morning's entire website is all one sophisticated honeypot, and we all fell for it?
or
C) ISS is more full of it than usual?

(Multiple answers possible :)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030725/863e0b30/attachment.bin