lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <1ior4tsog11xw$.dlg@syneticon.de>
Date: Mon, 28 Aug 2006 10:13:56 +0200
From: Denis Jedig <seclists@...eticon.de>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Re: George Bush appoints a 9 year old to be
	the chairperson of the Information Security Deportment

On Mon, 28 Aug 2006 12:45:09 +1200 Nick FitzGerald wrote:

> Denis Jedig wrote:
> 
>> Are there any documented cases on "serious" (i.e. not for scientific
>> research or fun, but profit) desinformation or propaganda campaigns using
>> XSS for their purposes? Some weird US pre-election stuff maybe?
> 
> You think the spammers and phishers that use Google's, Yahoo's, MSN's, 
> etc, etc open reidrecters to obfuscate their target URLs are _not_ 
> doing it for profit?  You think their objective in using URLs 
> encompassing those open redirectors is _not_ disinformation?

Maybe I should rephrase: I was mainly interested in cases similar to the
demonstrated one where "news" were spread to the general public to
influence the behavior of "the masses" rather than mere individuals.
Phishing is a really regrettable phenomenon, but I suspect that it will
appear just annoying compared to what targetted mass-disinformation[1] is
able to do.

[1] a measure currently only available to the respective gouvernment, the
three-letter-agencies and media moguls.
-- 
Denis Jedig
syneticon networks GbR             http://syneticon.net/service/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ