full-disclosure - Re: Fwd: IBM DeveloperWorks Pwned and Defaced

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 9 Jan 2011 23:24:20 +0000
From: "Cal Leeming [Simplicity Media Ltd]"
	<cal.leeming@...plicitymedialtd.co.uk>
To: Juha-Matti Laurio <juha-matti.laurio@...ti.fi>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Fwd: IBM DeveloperWorks Pwned and Defaced

So... No one has any juicy techie details as to how this happened, or is not
willing to disclose even though the problem is patched? Fail guys.

On Sun, Jan 9, 2011 at 7:47 PM, Juha-Matti Laurio <
juha-matti.laurio@...ti.fi> wrote:

> Zone-H mirror:
> http://zone-h.org/mirror/id/12878142
>
> Juha-Matti
>
> Shinnok [raydenxy@...oo.com] wrote:
> >
> >
> > ----- Forwarded Message -----
> > From: "Shinnok" <raydenxy@...oo.com>
> > To: "Maciej Gojny" <vuln@...ko-security.com>
> > Sent: Sunday, January 9, 2011 6:11:19 PM
> > Subject: Re: [Full-disclosure] IBM DeveloperWorks Pwned and Defaced
> >
> > That sucks...though not uncommon. Now they're hard at work. :-)
> > If it turns out the same vulns you're talking about were used
> > in this case, then they probably deserved it.
> >
> > ----- Original Message -----
> > From: "Maciej Gojny" <vuln@...ko-security.com>
> > To: full-disclosure@...ts.grok.org.uk
> > Sent: Sunday, January 9, 2011 12:24:56 PM
> > Subject: Re: [Full-disclosure] IBM DeveloperWorks Pwned and Defaced
> >
> >
> > @Shinnok
> >
> >
> > We have informed IBM about vulnerabilities in
> >
> >
> > http://www.ibm.com/developerworks/
> > http://publib.boulder.ibm.com
> >
> > http://www.ibm.com (mustlive discovery) ,
> >
> >
> >
> > Over 7 months ago, they d id not take it seriously.
> >
> >
> > regards,
> >
> >
> > Maciej Gojny
> >
> >
> >
> > Wiadomo[  napisana przez Shinnok w dniu 2011-01-09, o godz. 08:04:
> >
> >
> >
> > http://www.ibm.com/developerworks/linux/library/l-proc.html \^^
> >
> > Br,
> >
> > Shinnok
> >
> > http://twitter.com/raydenxy
> >
> >
> >
> >
> >
> > _______________________________________________
> > Full-Disclosure - We believe in it.
> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> > Hosted and sponsored by Secunia - http://secunia.com/
> >
> >
> >
> >
> >
> >
> >
> >
> > Ariko-Security
> > Rynek Glowny 12
> > 32-600 Oswiecim
> > tel:. +48 33 4741511 mobile: +48 784086818
> > (Mo-Fr 10.00-20.00 CET)
> >
> >
> >
> > Ariko-Security Sp. z o.o. z siedzib  w O[wi cimiu , zarejestrowana przez
> S d Rejonowy dla m. Krakowa-Zródmie[cia, XII WydziaB Gospodarczy Krajowego
> Rejestru S dowego, KRS: 00000358273, NIP: 549-239-90-67, REGON 121262172
> >
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/