full-disclosure - Re: [WEB SECURITY] noise about full-width encoding bypass?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 23 May 2007 01:19:16 +0200
From: Amit Klein <aksecurity@...il.com>
To: "Arian J. Evans" <arian.evans@...chronic.com>
Cc: Full-Disclosure <full-disclosure@...ts.grok.org.uk>,
	Web Security <websecurity@...appsec.org>
Subject: Re: [WEB SECURITY] noise about full-width
	encoding bypass?

Arian J. Evans wrote:
>
>
> On 5/22/07, *Amit Klein* <aksecurity@...il.com 
> <mailto:aksecurity@...il.com>> wrote:
>
>     Brian Eaton wrote:
>     > Has anyone had a look at the full-width unicode encoding trick
>     > discussed here?
>     >
>     > http://www.kb.cert.org/vuls/id/739224
>     >
>
>     BTW - why is this news? it has been known for long:
>
>
> I think the problem here is network security folks don't understand 
> this stuff at all.
>

Fair enough. Still, I expect at least the websecurity mailing list to 
give credit where credit is due...

-Amit

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/