full-disclosure - beyond security sucks at coding

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sun, 23 Dec 2007 20:22:55 -0600
From: reepex <reepex@...il.com>
To: full-disclosure@...ts.grok.org.uk, "Gadi Evron" <ge@...uxbox.org>
Subject: beyond security sucks at coding

http://www.milw0rm.com/exploits/4773

Gadi and Noam Rathaus and the crew suck at coding once again.

>>From the "exploit":

 my $ciphers = "";
 my $ciphers_length = pack('n', length($ciphers));

 my $certificate = "";
 my $certificate_length = pack('n', length($certificate));

I think the italian Phd students can write better perl than this.

You have to give it to Gadi and friends though spending the last year (
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-4343 Original release
date:9/28/2006 ) writing this complex exploit and testing it to work
on all
platforms ever created.
Noam's inability to code now shows me why all his books (
http://www.amazon.com/s?ie=UTF8&search-type=ss&index=books&field-author=Noam%20Rathaus&page=1)
are basic extensions and ripoffs of other peoples' code and why he
contributes nothing original or useful.

I guess to work at beyond security you must be a master in the art of
copy/paste, stealing code, and bullshitting technical "knowledge"

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/