full-disclosure - And you're proud of this Mike Evanchick?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <9E97F0997FB84D42B221B9FB203EFA2765AE96@dc1ms2.msad.brookshires.net>
From: toddtowles at brookshires.com (Todd Towles)
Subject: And you're proud of this Mike Evanchick?

Umm..and you were the one giving cheers to Norton. Of course AV can be
fooled..and of course a patch from microsoft is the only true way to fix
the problem. 
 
She was attacking you for giving Cheers to Norton. I didn't release the
POC, you did. I am happy Norton is detecting it. If you want to change
your words right in the middle of the sentence, I really don't care.
 
By attacking me on a personal level, you have proven to me..to be
unprofessional at best.


________________________________

	From: Michael Evanchik [mailto:Mike@...haelEvanchik.com] 
	Sent: Wednesday, December 29, 2004 5:03 PM
	To: Todd Towles; Elle Chicka; full-disclosure@...ts.netsys.com
	Subject: Re: [Full-Disclosure] And you're proud of this Mike
Evanchick?
	
	
	Todd,
	 
	Listen, you are so wrong i cant belive you even have the guts to
post this.  How stupid can you be?  Norton or any AVP can easily be
fooled.  The active x object "ca"+n b"+ +e crea" +ted" like this. code
changed around , or even different local code can be used and tada AVP
is fooled.  Only a true patch from microsoft or disable the help control
in the registry is going to stop this.  Her concern is wise.  
	 
	Mike
	www.michaelevanchik.com
	 

		----- Original Message ----- 
		From: Todd Towles <mailto:toddtowles@...okshires.com>  
		To: Elle Chicka <mailto:c1b3r_chick@...oo.com>  ;
full-disclosure@...ts.netsys.com 
		Sent: Wednesday, December 29, 2004 9:36 AM
		Subject: RE: [Full-Disclosure] And you're proud of this
Mike Evanchick?

		Well, if you have Norton, it couldn't wreak havoc...now
could it? Most of the AV compaines are now detecting the exploit. This
detection response is much faster than most of the other exploits which
are wreaking havoc on your network, so it would sound.
		 
		Nice work to Norton.


________________________________

			From: full-disclosure-bounces@...ts.netsys.com
[mailto:full-disclosure-bounces@...ts.netsys.com] On Behalf Of Elle
Chicka
			Sent: Monday, December 27, 2004 11:16 PM
			To: full-disclosure@...ts.netsys.com
			Subject: [Full-Disclosure] And you're proud of
this Mike Evanchick?
			
			
			You so proudly posted this:
			------------------------
	
http://securityresponse.symantec.com/avcenter/venc/data/trojan.phel.a.ht
ml
<https://mail.microsoft.com/exchweb/bin/redir.asp?URL=http://securityres
ponse.symantec.com/avcenter/venc/data/trojan.phel.a.html> 
			
			mike
			
			www.michaelevanchik.com
			 
			------------------------
			Obviously you are just tickled to see that the
kiddies were able to so quickly turn your point/click sploit code into a
virus to wreak havoc on my network.
			
			Thanks a lot for helping to make all of us a
little less secure over the holiday's.
			 

	
__________________________________________________
			Do You Yahoo!?
			Tired of spam? Yahoo! Mail has the best spam
protection around 
			http://mail.yahoo.com 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20041230/04f6a2bc/attachment.html