full-disclosure - Kindergarten on vacation (was: Obvious fake mail...)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20050108004942.GA8303@e-matters.de>
From: s.esser at e-matters.de (Stefan Esser)
Subject: Kindergarten on vacation (was: Obvious fake
	mail...)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi again,

it is quite funny how Immunitysec is supporting the kids that
first stole Paul's linux local root exploit and then sent it
out to the whole world in my name. Otherwise it is hard to
explain why dailydave again and again lets those obviously
faked emails through moderation. My original reply email
is reachable through the web interface only by number
juggling, because of pipermail bugs or a manipulation of the
generated archive. Whatever it was "replaced" by another
fake email with a faked e-matters gpg signature.

And the same bunch of kids accuse me again and again to have
stolen "their" bugs, they even sent me dead bugs (aka. insects)
within an anonymous letter from somewhere in the neatherlands
after I released the CVS advisories. (Well this is of course
only a guess and I cannot be sure that these are the same idiots)

Just spreading a rumour again and again f.e. that I am married
to divenint or that he gave me that CVS remote does not make it
more true.
You demonstrated today that you are able to read vendor-sec
emails... So you should actually know that I told vendor-sec,
that I reaudited CVS, because I had heard from a friend that
there is atleast one more CVS remote. Why in hell should I tell
that to them if I had stolen the exploit and wanted to hide that
fact?

It is your bad luck, that I found a bug that was obviously
circulating in the undergrounds for years. And now I have to
face the anger of a little kid that lost one of his toys.
And I will most probably face it again and again until you
die by a heart attack.

Yours,
Stefan Esser

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQFB3zGLSuF5XhWr2ngRAsGzAJ90LsGPkTWvDyItnX+F1IxbLgcSBQCgkYYw
PSIDxbn4c1G9XSBmqb4oq+4=
=W84s
-----END PGP SIGNATURE-----