full-disclosure - morning_wood should stop posting xss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <005a01c35214$f7a9cdb0$550ffea9@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: morning_wood should stop posting xss

I thought the XSS bug in the HP 4550 remote administration interface
that morning found was pretty cool.  His HP advisory was just published
on Bugtraq also.

Of course, not all XSS bugs are created equal.  Can anything interesting
be done with the XSS bug at morning's site?

Richard 

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of Jennifer
Bradley
Sent: Thursday, July 24, 2003 1:48 PM
To: full-disclosure@...ts.netsys.com
Subject: Re: Re: [Full-Disclosure] morning_wood should stop posting xss

The whole point, you moron, is that you are trying to gain credibility
as a security researcher.  If your own web site has a so-called XSS
security hole that you love to post about, then you look like an
idiot.  People, glass houses, stones, yada yada.

On Thu, 24 Jul 2003 03:35:47 -0700 morning_wood
(se_cur_ity@...mail.com) wrote:

 my site is my site, why are you telling me to "fix" it? I knew it's
404 has xss before any of you did.
Whats the big deal what my site has or hasnt... hmm? If you dont like
my stuff, dont read it,
my name is on every one of my posts.. every hear of filter? I dont
read several advisories here based on title alone.. am i missing out?
mby, mby not.. are you? XSS is a seecurity issue plain and simple, and
"my site" can have or have not whatever i please, i suggest not
visiting then, hell .. why are you even bothering to visit if you dont
like.. "all you do is lame xss" ???  a job... ROFL  stfu  .. mmmmkay

morning_wood

  ----- Original Message -----
  From: Faulty
  To: full-disclosure@...ts.netsys.com
  Sent: Thursday, July 24, 2003 2:30 AM
  Subject: [Full-Disclosure] morning_wood should stop posting xss
vulns in sites and fix his own site.

  morning_wood what is it with you and xss no one cares. Don't you
think you shoudl fix your own xss vulns in your site
http://lists.netsys.com/pipermail/full-disclosure/2003-July/011565.htm
l
  before you accuse other people of being dumb for having the vulns.
Mabee you want to fix your site but you can't ? cuz you have no skillz
  here is a tip - GIVE UP GET A JOB AT BURGER KING.

----------------------------------------------------------------------
--------
  Want to chat instantly with your online friends? Get the FREE Yahoo!
Messenger

_______________________________________________________________________
LOOK GOOD, FEEL GOOD - WWW.HEALTHIEST.CO.ZA

Cool Connection, Cool Price, Internet Access for R59 monthly @ WebMail
http://www.webmail.co.za/dialup/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html