full-disclosure - Re: Fun with Foundstone

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060215031430.7998E15E@lists.grok.org.uk>
Date: Wed Feb 15 03:14:37 2006
From: mail at hackingspirits.com (Debasis Mohanty)
Subject: Re: Fun with Foundstone

Does this mean, Dave's age is inbetween 3 - 4 yrs ?? =) 

- D


-----Original Message-----
From: full-disclosure-bounces@...ts.grok.org.uk
[mailto:full-disclosure-bounces@...ts.grok.org.uk] On Behalf Of
ad@...poverflow.com
Sent: Wednesday, February 15, 2006 4:07 AM
To: Dave Korn
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [Full-disclosure] Re: Fun with Foundstone

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
what LOL ? what is surprising ? they are probably on FD b4 you were born :)

Dave Korn wrote:
> orangeofficer@...hmail.com wrote:
>> Things for a security company not to do in a webapp:
>>
>> 1. Do not auto-populate form fields on the page with customer names.
>>
>> 2. If you ignore rule number 1, don't use a simple, predictable id 
>> for said auto-population.
>>
>> https://download.foundstone.com/?o=^2155
>
>   LOL, blocked already!
>
>> Rinse, increment, and repeat for a list of Foundstone customers...or 
>> at least a list of companies they've let download software.
>
> ... or at least a list of a million-and-one variants on "M. Mouse" and
"Noah
> Body" ...
>
>    ... nearly _all_ of whom appear to live in Beverley Hills.
>
>     cheers,
>       DaveK

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
 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=/7LA
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/