bugtraq - re: [SE-2008-01] J2ME Security Vulnerabilities 2008

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 08 Aug 2008 00:51:37 +0200
From: Security Explorations <contact@...urity-explorations.com>
To: bugtraq@...urityfocus.com
Subject: re: [SE-2008-01] J2ME Security Vulnerabilities 2008


> On 7 Aug 2008 18:55:06 -0000, 0xjbrown41@...il.com <0xjbrown41@...il.com> wrote:
> * establishing of arbitrary phone calls
> 
> From RFC 3966 (http://www.faqs.org/rfcs/rfc3966.html):
...
> So, if you are referring to the callto: security risk on most all mobile browsers, they already know.

Although your point is completely valid, we make use of some other
technique to establish arbitrary phone calls.

Best Regards,
Adam Gowdiak
-------------------------------------
Security Explorations
http://www.security-explorations.com
-------------------------------------