[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <6905b1570701030227j58ad437en3b1bfe456cd784a3@mail.gmail.com>
Date: Wed, 3 Jan 2007 10:27:26 +0000
From: "pdp (architect)" <pdp.gnucitizen@...glemail.com>
To: "sven.vetsch@...enchant.ch" <sven.vetsch@...enchant.ch>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
"Web Security" <websecurity@...appsec.org>
Subject: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous
no worries, the vulnerability details presented on my blog post were
updated. good work.
On 1/3/07, sven.vetsch@...enchant.ch <sven.vetsch@...enchant.ch> wrote:
> Quoting "pdp (architect)" <pdp.gnucitizen@...glemail.com>:
>
> > This finding was originally mentioned by Sven Vetsch, on his blog.
> > This is a very good and quite interesting. Good work.
>
> Sorry about that but that's wrong. All the credits have to go to Stefano Di
> Paola and Giorgio Fedon. They presented that stuff at the 23C3 in Berlin. The
> only thing that I did was an overview and I found out, that it doesn't matter
> how the parameter is called. I "just" forgot to copy paste the credits from my
> original document, to the blog entry. I'm very sorry about that and of course I
> putted it in my entry now.
>
> Regards,
> Disenchant / Sven Vetsch
>
>
>
--
pdp (architect) | petko d. petkov
http://www.gnucitizen.org
Powered by blists - more mailing lists