full-disclosure - Mozilla Firefox "Host:" Buffer Overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <9E97F0997FB84D42B221B9FB203EFA2701657755@dc1ms2.msad.brookshires.net>
Date: Fri Sep  9 17:03:23 2005
From: toddtowles at brookshires.com (Todd Towles)
Subject: Mozilla Firefox "Host:" Buffer Overflow

Andrew wrote:
> What about all those poor mom's and dad's who were encouraged 
> to use Firefox but have 0 clue as to what the heck 
> Full-Disclosure is?  Seems to me your idea of "everyone" is misguided.

And if a patch is released for Firefox, those same mom and dad still
aren't going to know it is out there. They aren't aware when Microsoft
releases patches...so I believe there is no correct "everyone". We are
all on different levels of security understand and some people just
don't care (or know any better to care). 

I believe Dave was referring the security/network admins as a whole that
have to watch over their users (hence "everyone that cares about the
security of their network") - which isn't every mom and pap...or they
wouldn't be using open Linksys routers in the first place. This list
isn't out there to protect  every mom and pap on the world....

-Todd