full-disclosure - tripbid secure codes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200306270525.h5R5PEpV060338@mailserver2.hushmail.com>
From: auto94042 at hushmail.com (auto94042@...hmail.com)
Subject: tripbid secure codes

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

holos,

i come to tell a very grave thing that make me many a stress . . .

i post the thing to the vuln dev some days ago and get quite a big respnose.
not only do i get a heart 2 heat with n1xo reiman about portmon ! but
some folks want me to look at the code they make, specially a 'hello-
world.c' progie -> " holo, can you check my hello-world.c for strcpy
?? securecode do the trick " <- paraphase the msg, i rm -rf / it since
it make me anger and stress it !

i am willing to try the secure code since the grep 'strcpy' is losing
his thrills so i trick around with :
[user@...alhost]$ ./securecode -s hello-world.c

File to open: hello-world.c

Please wait...

The scan has finished!

i see that the hello world is safe from strcpy over flow so not a worry
and then i eat some snack. behold ! some monkey buisness when i came
back-
[user@...alhost]$ ls
bala_clava_has_you/  hello-world.c  r00t_is_next_pylon/  securecode*
 tmp/  YOU_ARE_SUCH_A_FUCKING_MOMO/
/* some stuff got snippity , for levity of full discloshure(i read the
chatter by len!*/

i do not mkdir these thing !! who can it be clowning around? ?

i attach the hello_world and zipper it to protect the readers you can
unzipper it(tar -zxvf) but you may be hack if your not careful and try
secure code -s to it .  maybe some one can tell me what happen or help
me figure it what next to do ? ? i think this machnie is not a trusted
one :
[user@...alhost]$ uname -a
Linux localhost 2.4.21-0.13mdk #1 Fri Mar 14 15:08:06 EST 2003 i686 unknown
unknown GNU/Linux

-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Charset: UTF8
Version: Hush 2.3

wkYEARECAAYFAj77gD4ACgkQarKSBij8yILBZgCcD6Vh3B8TypME+MFqe5XrjhA46owA
n2prBzaEsw7Wk4YoOx/VV/Qc2tzm
=hrqO
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: hello-world.tar.gz
Type: application/x-gzip
Size: 285 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030626/3422d5d2/hello-world.tar.bin
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: hello-world.tar.gz.sig
Url: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20030626/3422d5d2/hello-world.tar.gz.ksh