full-disclosure - Re: Simcard 0day.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Fri, 12 Jan 2007 19:18:04 -0500
From: gabriel rosenkoetter <gr@...ipsed.net>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Simcard 0day.

On Mon, Jan 01, 2007 at 05:43:05PM -0800, Blue Boar wrote:
> Does this actually work on people on a security mailing list?

Speaking as someone whose current employer has chosen to subscribe
its NOC staff group email (a member of which, thankfully, I am not)
on an Exchange server to various security mailing lists, in the
interest of having the NOC monitor security alerts and open tickets
over those affecting systems and applications in use, for which
purpose they of course use Outlook... Yes, it pretty definitely
does, and gets you in places that are otherwise decently protected.

There's little cure for stupidity at the management level other than
patience.

-- 
gabriel rosenkoetter
gr@...ipsed.net

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/