full-disclosure - Re: [WEB SECURITY] noise about full-width encoding bypass?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 23 May 2007 01:54:09 +0200
From: Amit Klein <aksecurity@...il.com>
To: Web Security <websecurity@...appsec.org>
Cc: "Arian J. Evans" <arian.evans@...chronic.com>,
	Full-Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: [WEB SECURITY] noise about full-width
	encoding bypass?


>>
>>     BTW - why is this news? it has been known for long:
>>
>>
>> I think the problem here is network security folks don't understand 
>> this stuff at all.
>>
>
> Fair enough. Still, I expect at least the websecurity mailing list to 
> give credit where credit is due...
>
Just to clarify - I meant "mailing list" as in "mailing list 
subscribers". I did not mean "mailing list admin". The websecurity 
moderation is conducted solely for generally keeoing the discussion on 
topic, and with no attempt (I think) in general to verify the accuracy 
of the materials nor their novelty. And I respect that.

-Amit

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/