lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Wed, 3 Jan 2007 10:27:26 +0000
From: "pdp (architect)" <pdp.gnucitizen@...glemail.com>
To: "sven.vetsch@...enchant.ch" <sven.vetsch@...enchant.ch>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com,
	"Web Security" <websecurity@...appsec.org>
Subject: Re: [WEB SECURITY] Universal XSS with PDF files: highly dangerous

no worries, the vulnerability details presented on my blog post were
updated. good work.

On 1/3/07, sven.vetsch@...enchant.ch <sven.vetsch@...enchant.ch> wrote:
> Quoting "pdp (architect)" <pdp.gnucitizen@...glemail.com>:
>
> > This finding was originally mentioned by Sven Vetsch, on his blog.
> > This is a very good and quite interesting. Good work.
>
> Sorry about that but that's wrong. All the credits have to go to Stefano Di
> Paola and Giorgio Fedon. They presented that stuff at the 23C3 in Berlin. The
> only thing that I did was an overview and I found out, that it doesn't matter
> how the parameter is called. I "just" forgot to copy paste the credits from my
> original document, to the blog entry. I'm very sorry about that and of course I
> putted it in my entry now.
>
> Regards,
> Disenchant / Sven Vetsch
>
>
>


-- 
pdp (architect) | petko d. petkov
http://www.gnucitizen.org

Powered by blists - more mailing lists