full-disclosure - more rehashes of xss & 'evil gif'

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 5 Aug 2008 00:26:03 -0500
From: "Robert Holgstad" <rholgstad@...il.com>
To: full-disclosure@...ts.grok.org.uk,
	"Nate McFeters" <nate.mcfeters@...il.com>
Subject: more rehashes of xss & 'evil gif'

http://www.infoworld.com/article/08/08/01/A_photo_that_can_steal_your_online_credentials_1.html

seems dan isn't the only press whore around! rebouncing from his embarasing
post about 'deputy dan' and the matasano blog - whoosh anyone? nate and his
crew of javascript gurus have whipped up another rehash of an old class of
bugs that has been used in the wild for a long time. we personally want to
thank nate for his great work hes done for conferences over the years
filling up their talking spots with useless crap. his work is only rivaled
by gadi evron who gets accepted to every conference because declining a fat
AND jewish person is guarenteed to get 1000s of big nosed ambulance chasers
after you by the end of business day.

once again we would ilke to thank nate for his cutting edge research and
hopefully he will get nommed for next years pwnie life time acheivement
award!

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/