full-disclosure - MSIE (mshtml.dll) OBJECT tag vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20060428075748.B61ED33C2C@mailserver5.hushmail.com>
Date: Fri Apr 28 08:57:57 2006
From: 0x80 at hush.ai (0x80@...h.ai)
Subject: MSIE (mshtml.dll) OBJECT tag vulnerability

Blah blah blah... shut the fuck up whiner.

Mr. C.I.S.S.P... Mr. M.C.S.E

What the fuck do you know about working with vendors and 
vulnerabilities?  Jack and shit.. that is what you know.

You want a service.. then fuckin pay for it newb.

On Wed, 26 Apr 2006 08:06:09 -0700 Tim Bilbro 
<trbilbro@...izon.net> wrote:
>You do a disservice to all IT shops by announcing these 
>vulnerabilities
>before contacting the vendor. I am sure it would not generate as 
>much
>web traffic to your site, but it is only fair and right to allow 
>at
>least some amount of time for the vendor to respond. If you think 
>you
>are helping, you are wrong. Would you go around town checking 
>which
>stores are unlocked at night and then publish the list in the news
>before letting the shop owners know? That's pretty much what you 
>are
>doing. It's just not helping. There is no proof that it is either.
>
>Tim Bilbro
>Information Security Specialist
>CISSP, MCSE
>trbilbro@...izon.net
>web: www.bloglines.com/blog/Bilbro
>RSS: www.bloglines.com/blog/Bilbro/rss



Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485