full-disclosure - I think some one might have screwed-up

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: adam at huntrecruiting.com (Adam)
Subject: I think some one might have screwed-up

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Nico,

well this interface gives paths to dir's and file's so I would assume that
this being in public view would give a malicious cracker a leg up in getting
where they would want to go.

maybe I'm wrong ?

I thing this would be great tool for a project I'm doing and I would
personally at least passwd protect it with htaccess

so far I'm getting mixed reviews about the potential for using the info on
this URL

Thank you all for your input thus far.

Adam

On Friday 07 May 2004 11:38 am, you wrote:
> Hello Adam,
>
> * Adam <adam@...trecruiting.com> [2004-05-07 16:39]:
> > can some one tell me is this a good thing to leave in public?
>
> i dont understand your question.
> regards nico
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAm9kvQEDQWvlbVLkRAiAhAJ9AWpJ8hFIZq3mCWWp6bIb0Ja9u9wCdFHDA
7ChT+h4hD8mpS3EbOPKJlv8=
=mQFu
-----END PGP SIGNATURE-----