full-disclosure - Re: hax0r target just because of silly autoresponder? (was: Nico Treu/METZLER ist außer Haus.)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: Valdis.Kletnieks at vt.edu (Valdis.Kletnieks@...edu)
Subject: Re: hax0r target just because of silly autoresponder? (was: Nico Treu/METZLER ist außer Haus.)  

On Mon, 16 Feb 2004 13:02:44 +1300, Nick FitzGerald <nick@...us-l.demon.co.uk>  said:
> Valdis.Kletnieks@...edu wrote:
> 
> > And if MailMan wasn't configured to strip RFC822 headers, we'd also have a 
nice
> > hint as to exactly which patchlevel of the offending MUA/MTA the site was r
unning,
> > so we could arm ourselves with suitable exploits.
> 
> And you don't think you'd get that information by sending him a message 
> directly, expecting a vacation notice??

Yeah, but you had to WORK for that info, rather than be gratuitously handed it
for free ;)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20040216/f6ae6de2/attachment.bin