full-disclosure - Re: ICQ 6 protocol bug?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Sat, 14 Feb 2009 18:04:52 -0500
From: bobby.mugabe@...hmail.com
To: full-disclosure@...ts.grok.org.uk, valdis.kletnieks@...edu
Subject: Re: ICQ 6 protocol bug?

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Watching Darren Reed vs Valdis Kletnieks on the Full Disclosure
promises all sorts of hilarity, far beyond whatever n3td3v could
have brought to the list.

- -bm

On Sat, 14 Feb 2009 16:49:05 -0500 Valdis.Kletnieks@...edu wrote:
>On Sat, 14 Feb 2009 23:26:48 +0200, James Matthews said:
>
>> ICQ is known to have a few remote bugs. I use meebo.com instead
>of a client
>> due to these issues.
>
>At which point you're probably trading known bugs for unknown
>bugs. ;)
>
>Of course, this is a battle the user can't win. The other option
>is to
>toss the proprietary ICQ client and use some other open-source
>client like
>Pidgin - at which point you're trading known ICQ bugs for unknown
>Pidgin bugs.
>At that point, your best bet is to consider 2 things:
>
>1) What client am I most likely to see actual attacks against?
>2) What client am I the most worried about attacks?
>
>(Note the two don't have to be the same - widespread ICQ attacks
>may be more
>common, but maybe you worry more about getting hit with a Pidgin
>attack because
>it possibly means you're being targeted....)
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 3.0

wpwEAQMCAAYFAkmXThAACgkQhNp8gzZx3sh7NgP/Yf8p2nsdi8RG11BRQw7/873uhgwr
XZ4e4LW25nm900XAY85vwNh5XVgTge6qApgc+4RWLNJ9/fVENrySqAk7/WPiEUXu/gb0
/7geI9cI2kj9WWKJiCcHasaukW2yOiufJIz+EDSdoep7SnrlXahqzrttRT3It3CedGrf
7F/4RWE=
=KQus
-----END PGP SIGNATURE-----

--
Click to learn about options trading and get the latest information.
 http://tagline.hushmail.com/fc/PnY6qxtXbeoMCp1DPQuhdKhIcENgQMqAbOd4sjP4guplxSEOiTzBG/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/