full-disclosure - MyDoom download info

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: dspisak at nonmundane.org (Daniel Spisak)
Subject: MyDoom download info

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

If you had read the README-FIRST.TXT file you would know that the files 
are self-extracting archives.

Secondly, wouldn't it be somewhere in the neighborhood of dumb to 
massively idiotic for me to post virii examples that I have trojaned 
with my own backdoor and then post links to them on a public discussion 
forum where everyone can quite obviously see where my email originates 
from, let alone the fact that I PGP sign all my email to this list?

Sorry if I come off a bit pained here but it just seems obvious to me 
how utterly stupid I would have to have been to have tried something 
like that. You also don't see anyone on this list mentioning as such 
was done to any of the examples they got from those same links when I 
was emailing people who requested it before I had posted the URLs here.

Daniel E. Spisak
Security Engineer
OnlineSecurity
www.onlinesecurity.com
dan@...inesecurity.com
Cell: 562.331.1603

On Jan 30, 2004, at 4:38 PM, Scott Taylor wrote:
> Am I the only one that found it to be a little bit shady that these 
> were
> made available as executables? Is the "B" version posted somewhere as
> just a plain zip? I don't seem to have already received my free copy in
> the mail yet.
>
> On Fri, 2004-01-30 at 12:17, Daniel Spisak wrote:
>
>> http://www.nonmundane.org/~dspisak/danger/README-FIRST.TXT
>> http://www.nonmundane.org/~dspisak/danger/MyDoomA.exe
>> http://www.nonmundane.org/~dspisak/danger/MyDoomB.exe
> --
> Scott Taylor - <security@...underground.com>
>
> BOFH Excuse #216:
>
> What office are you in? Oh, that one.  Did you know that your building 
> was built over the universities first nuclear research site? And wow, 
> aren't you the lucky one, your office is right over where the core is 
> buried!
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3

iQA/AwUBQBr/yBUn/Hz8mr7jEQIkCgCeJX/45Qmnjlx+ji/j3y0NAopN8r8AoMQ0
tGWoIwLcFCOBpTjJnjb/BU+Y
=J8vp
-----END PGP SIGNATURE-----