full-disclosure - Secret Vulns: Places of confusion

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <41A04EB1.7050700@easynix.net>
From: devis at easynix.net (devis)
Subject: Secret Vulns: Places of confusion

Very well said. And kindly too.

Talk or shut up is faster, somehow not as kind.

Michael Rutledge wrote:

>Correct me if I'm wrong (which I know the list members will take me up
>on that), the FD mailing list is about *discussing* vulnerabilities
>and revealing important information to the community.  This post seems
>to comment on general problems with general products--so general in
>fact that the products or specific problems are not addressed.  If you
>cannot or will not (for privacy issues) share any details about your
>findings, I believe that the posted findings are quite useless to the
>community.  I mean this in a constructive sense.
>
>However, if some of the other community members feel that this post is
>informative in some way, I will gladly hear their reasoning.
>
>-Michael
>
>
>On Sat, 20 Nov 2004 20:11:40 -0000 (GMT), gp <girl@...holic.org> wrote:
>  
>
>>hello list
>>
>>Sometimes ago I have examined the websites of many
>>Government's if it's possible to put malicious code
>>in their URLs. In November 2004 I inform some
>>Deparments about my successful work.
>>
>>On most Sites it is possible to:
>>- inject SQL
>>- account hijacking
>>- user exploitation
>>- server manipulation
>>- read complete dir
>>ect. ect.
>>
>>In Arrangement with the Victims I will not reveal
>>vulnerability or victim details until a fix became
>>published. I will answer no questions!
>>This is only for Your information!
>>
>>Credits:
>>d.w., ms, [...]
>>
>>--
>>g@cat online <-> MM
>>----------
>>.//sometimes its better to know somewhat as all but at later times would
>>be better to know nothing
>>
>>-----------------------------------------
>>This email was sent using FREE Catholic Online Webmail!
>>http://webmail.catholic.org/
>>
>>_______________________________________________
>>Full-Disclosure - We believe in it.
>>Charter: http://lists.netsys.com/full-disclosure-charter.html
>>
>>    
>>
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>
>  
>