full-disclosure - morning_wood should stop posting xss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <001101c3524e$a91aabd0$0b01a8c0@nerv.local>
From: gbunch at gmx.net (Gerald Cody Bunch)
Subject: morning_wood should stop posting xss

Point of order: To be a honeypot the vulnerability would have 
to be on a system that served no other purpose, despite what 
ISS would have you believe.
 
Cory Altheide
Computer Forensics Specialist
NNSA Cyber Forensics Center
altheidec@...doe.gov
 
> > -----Original Message-----
> > From: Myers, Marvin [mailto:MRMyers@...eon.com]
> > Sent: Thursday, July 24, 2003 11:44 AM
> > To: Jennifer Bradley; full-disclosure@...ts.netsys.com
> > Subject: RE: Re: [Full-Disclosure] morning_wood should stop
> > posting xss
> > 
> > 
> > Jennifer,
> >    Did you ever think that there is even the slightest possibility 
> > that the wood has done this on purpose? Have you never heard of a 
> > honey-pot. Some people in this world do have the ability to learn by

> > observing others. So now I guess you are calling all of the 
> > honey-pot and honey-net operators moron's. Did you hear that Lance??

Consider then the concept of a 'Honey Token'
http://securityfocus.com/infocus/1713


Thanks for your time,

gbunch@....net
"Got TANG?"