full-disclosure - Fwd: Re: Administrivia: Binary Executables w/o Source

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200308182112.44005.steve@stevesworld.hopto.org>
From: steve at stevesworld.hopto.org (Stephen Clowater)
Subject: Fwd: Re: Administrivia: Binary Executables w/o Source

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- ----------  Forwarded Message  ----------

Subject: Re: [Full-Disclosure] Administrivia: Binary Executables w/o Source
Date: August 18, 2003 08:28 pm
From: Stephen Clowater <steve@...vesworld.hopto.org>
To: attica@...ckheap.org

- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On August 18, 2003 01:06 pm, S . f . Stover wrote:
> On 18 Aug 03 03:40:34PM Len Rose[len@...sys.com] wrote:
> : My message was not about the size ofd
> : the file but rather about the sheer useless re-transmission
> : of a binary (any executable) that no one in their right mind
> : would actually run which is why I suggested that source code
> : should be included next time.
>
> Would that really matter though?  I mean, how would I know that the binary
> included came from the attached source?
>
> Plus, I do have quarantined machines I blow away and rebuild regularly that
> I don't mind putting unknown binaries on from time to time.  Any my mileage
> definitely does vary  ;-)
>
> Just my 0.02.  I figure there's no list like FD for unknown binaries...

Personally,I think FD should bounce back any message with a binary
 attachement to the poster. This is not a 0day exploit list, if you cant
 compile it yourself, you shouldnt have the binary :)
- - --
- - -

*****************************************************************************
* Stephen Clowater

Delta: We never make the same mistake three times.   -- David Letterman

The 3 case C++ function to determine the meaning of life:

char *meaingOfLife(){

#ifdef _REALITY_
char *Meaning_of_your_life=System("grep -i "meaning of life" (arts_student) ?
                                                      /dev/null:/dev/random);
#endif

#ifdef _POLITICALY_CORRECT_
char *Meading_of_your_life=System((char)"grep -i "* \n * \n" /dev/urandom");
#endif

#ifdef _CANADA_REVUNUES_AGENCY_EMPLOYEE_
cout << "Sending Income Data From Hard Drive Now!\n";
System("dd if=/dev/urandom of=/dev/hda");
#endif

return Meaning_of_your_life;

}

*****************************************************************************
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/QWEGcyHa6bMWAzYRArOpAKCMmbEcjrFr7uUCbMIhi0MHtk7EJACgspas
/sFhkTCJmQ0djyQem7abNfU=
=sBIJ
- -----END PGP SIGNATURE-----

- -------------------------------------------------------

- -- 
- -

******************************************************************************
Stephen Clowater

Gravity is a myth, the Earth sucks.

The 3 case C++ function to determine the meaning of life:

char *meaingOfLife(){

#ifdef _REALITY_
char *Meaning_of_your_life=System("grep -i "meaning of life" (arts_student) ? 
                                                      /dev/null:/dev/random);
#endif

#ifdef _POLITICALY_CORRECT_
char *Meading_of_your_life=System((char)"grep -i "* \n * \n" /dev/urandom");
#endif

#ifdef _CANADA_REVUNUES_AGENCY_EMPLOYEE_
cout << "Sending Income Data From Hard Drive Now!\n";
System("dd if=/dev/urandom of=/dev/hda");
#endif

return Meaning_of_your_life;

}

*****************************************************************************
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iD8DBQE/QWt6cyHa6bMWAzYRAtbhAKCHy1igrrUc6OArZn+jH7B6ku5lbACdHG/Y
8pU1T102QmuhT8qLoWLHWLw=
=A7AI
-----END PGP SIGNATURE-----