bugtraq - Re: Local DoS in windows. [indeed it works... PROOF?]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20031012180138.79577.qmail@web20208.mail.yahoo.com>
Date: Sun, 12 Oct 2003 11:01:38 -0700 (PDT)
From: bipin gautam <visitbipin@...oo.com>
To: dksaarth@...x.za.net
Cc: full-disclosure@...ts.netsys.com, bugtraq@...urityfocus.com,
   secure@...rosoft.com
Subject: Re: Local DoS in windows. [indeed it works... PROOF?]

[... see full disclosure mailing list for
discussion/details]
so i have to share the credit... cauz you use a
modulus of my trick to achive similar result!!! 
[ well... take all the credit if you want...]

i just wanna say, see , i wasn't wrong...

ps! trust me i knew that, many of such similar thing's
is possiple <just don't wanna create a long list's of
CRAPS!] hell, there are lot of thing's....... EVEN IF
YOU HOLD SOME [SPECIALLY CRAFTED!] DIALOG BUTTONS OT
WILL SHOW SIMILAR ISSUE!!!

WELL, i can't still figure out... WHAT CUSES THE REAL
problem cauz i have been getting about equal positive
and negative responce from all around the globe!!!
-------------------------------------------------
--- Valdis.Kletnieks@...edu wrote:
> On Sun, 12 Oct 2003 02:18:16 +0200, Richard Spiers
> <dksaarth@...x.za.net>  said:
> > whoopee!. Bleh. Really a security issue? Same
> thing happens if you have show
> > windows content enabled and you drag around a
> window, as long as your
> > dragging the window, the cpu will remain close to
> 100 % usage. Significant?
> 
> Probably not directly, but possibly indirectly.
> 
> The questions are, of course:
> 
> 1) Is the 100% cycle sucking done as a pre-emptible
> thing, or can you
> cpu-starve something else using it?
> 
> 2) Is there some *other* security-related API that
> botches incorrectly if it's
> cpu-starved?
> 
> > No, unless its proof of some shoddy coding of
> some-sort.
> 
> A hammer is a useful tool for finding 
> non-impact-resistant screws......
> 

> ATTACHMENT part 2 application/pgp-signature 

__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html