full-disclosure - Microsoft Windows and *nix Telnet PortNumber Argument Obfuscation

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <42A85AEB.5010804E@deaddrop.org>
Date: Thu Jun  9 16:11:13 2005
From: shrdlu at deaddrop.org (Etaoin Shrdlu)
Subject: Microsoft Windows and *nix Telnet PortNumber 
	Argument Obfuscation

Kristian Hermansen wrote:
> 
> On Wed, 2005-06-08 at 15:04 +1200, Nick FitzGerald wrote:
> > This has been known since Adam was a cowboy.

He's right, you know.

> Although I don't believe that your claim is unlikely, it would have been
> nice to post a link to the original discovery to back it up.

This is just foolishness.

>  Everyone
> that I have showed this to, personally, has not seen it before.  And,
> after some google searching, I could not locate anyone else either that
> talked about this -- the closest thing was an old Microsoft telnet
> advisory that didn't mention this behavior specifically.

Link? Why would there be a "link" to show where the "original advisory"
was? You have just got to be kidding.

> With that said, I would like to ask anyone who has info about the
> original discovery to please post it here (Nick didn't respond to my
> email).  I am interested to know more about it, and maybe the original
> discoverer found other things as well...thanks

Original discovery??? Don't you work for Cisco? Try either the Stevenson or
Doug Comer 3-volume set on networking. That'd probably help. I realize that
there seem to be a *whole* bunch of folk that feel that FD is a playground
and learning environment. For those of us actually looking at it as an
early warning system, think of Nick as being a vocal representative of the
majority of more senior security people on the list.

Please, if your objective is to learn about the basics, do it *elsewhere*.

--
The command line is useful for people who like to communicate
with their computers with a *language*, GUIs are for people
who like to to communicate by *pointing and grunting*
	So who's the Neanderthal?  (J. J. Green)