lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 14 Apr 2008 16:05:30 -0400
From: Valdis.Kletnieks@...edu
To: n3td3v <xploitable@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Fwd: n3td3v has a fan

On Mon, 14 Apr 2008 20:04:37 BST, n3td3v said:

> There are many ways the parking setup could be used against Yahoo
> adversaries, think car bomb, or truck bomb? It was hugely
> irresponsible of Yahoo to allow such photos to be taken by on-the-fly
> employees.

For the wannabe bomber, the fact that the area has *also* been mapped by Google
Maps and Microsoft Terra and probably bunches of others is probably a lot more
important.  Among other things, the average amateur photo does a really shitty
job of telling you things about stuff like approaches, ramps, lane markings for
turns, and where you can and can't drive a vehicle of a given size.

http://maps.google.com/?ie=UTF8&ll=39.112212,-76.771844&spn=0.000856,0.001529&t=h&z=20

If the owner of that gatehouse doesn't care about publicly available
satellite imagery at that resolution, why should Yahoo care about amateur
photos?

Yahoo may suck enough to motivate a car bomb, but the owner of the gatehouse
is truly a world-class Hoover.. ;)



Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ