full-disclosure - Orkut exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <af406b770606281319n6845130dj99be2aa9660f7378@mail.gmail.com>
Date: Wed Jun 28 21:19:43 2006
From: ademar.gonzalez at gmail.com (Ademar Gonzalez)
Subject: Orkut exploit

On 6/28/06, nocfed <nocfed@...il.com> wrote:

>
> In what way is this an "Orkut exploit" as the subject of the mail
> describes?  This is more of an "Idiot exploit"...
>

yeah, i agree is an idiot exploit,  English is not my first language
and that was the best subject i could come up with.

but don't be fooled, they may be using something inside orkut to
collect the email addresses. it may be a lame xss, i will let that for
whoever wants to figure it out.

cheers

ademar