full-disclosure - visa XSS?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <BAY2-F37BEr8pkpLkTg0004ec26@hotmail.com>
From: scottanderson392 at hotmail.com (Scott Anderson)
Subject: visa XSS?

How is this located in Queensland.  Arin clearly states:

OrgName:    Net Access Corporation
OrgID:      NAC
Address:    1719 STE RT 10E
Address:    Suite 111
City:       Parsippany
StateProv:  NJ
PostalCode: 07054
Country:    US

Am I missing something?

-----Original Message-----
From: Adam Hunt [mailto:adam@...trecruiting.com]
Sent: Wednesday, 24 December 2003 3:29
To: jan.muenther@...ns.com; Mauro Flores
Cc: full-disclosure@...ts.netsys.com
Subject: Re: [Full-Disclosure] visa XSS?

this is not nac.net

it's a completely different netblock blah blah

it's some punk in Queensland AU

Robbie Walker

and if some one is sniffing from nac.net it's too bad for them because 
nac.net
is run by some completely incompetent MS dorks who at some point switched to
freeBSD and are learning by the seat of there pants (I know because I use to
be a customer DSL was great from them because they knew nothing about
bandwidth management and I took a entry levle class with a senior bandwidth
manager) as well I am regularly taking there customers and doing 
development,
and hosting for them because of the downtime probs and security issues that
nac.net is continually plagued with and I usually save the clients between 
50
and 75 % of there yearly bill with better service.

I'm just righting this to poke the nose of nac.net.

Adam

On Tuesday 23 December 2003 08:10 am, jan.muenther@...ns.com wrote:
> > I went to http://64.21.80.2/~gotier/verified_by_visa.htm, this guy is
> > using a php script to get card numbers and pins, I think that someone is
> > going to have a merry christmas :)
>
>Heh, true. Did you write the connecting ISP (nac.net) an abuse email? The
>box is running quite a bunch of services, of which quite a few are plain
>text ones, so I'd guess the kid has sniffed them somewhere and replaced
>this poor guy's pages in his home dir...
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_________________________________________________________________
Get less junk mail with ninemsn Premium. Click here  
http://ninemsn.com.au/premium/landing.asp