full-disclosure - morning_wood should stop posting xss

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <Law11-OE44anUCyTG9E0000404a@hotmail.com>
From: se_cur_ity at hotmail.com (morning_wood)
Subject: morning_wood should stop posting xss

OK.. I'll bite.... are you saying:

A) Morning's website is useless?
or
B) Morning's entire website is all one sophisticated honeypot, and we all
fell for it?
or
C) ISS is more full of it than usual?

(Multiple answers possible :)

=====================

A. no

B. also no, only standard logging ( no need to honeytoken ) on the 404 page

C. correct

morning_wood