full-disclosure - Re: [fuzzing] The truth

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <B784FE5FA30AAB4C8A09D803AA8185530216757B@mse11be1.mse11.exchange.ms>
Date: Thu, 19 Jul 2007 10:27:18 -0400
From: "David Maynor" <dave@...atasec.com>
To: <joey.mengele@...hmail.com>, <andre@...rations.net>, <lmh@...o-pull.com>
Cc: full-disclosure@...ts.grok.org.uk, fuzzing@...testar.linuxbox.org,
	dailydave@...ts.immunitysec.com
Subject: Re: [fuzzing] The truth

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

I am going to guess it has something to do with the pgp signature, I can post from dave@...atasec.com and I can update the erratasec blog. 

- -----Original Message-----
From: Joey Mengele [mailto:joey.mengele@...hmail.com] 
Sent: Thursday, July 19, 2007 10:16 AM
To: andre@...rations.net; lmh@...o-pull.com; David Maynor
Cc: full-disclosure@...ts.grok.org.uk; fuzzing@...testar.linuxbox.org; dailydave@...ts.immunitysec.com
Subject: Re: [Full-disclosure] [fuzzing] The truth

But what does Dr. Neal Krawetz have to say? I will not draw any 
conclusions until he has the time to analyze the writing samples. 
As Neal has taught us, the students of Full Disclosure, there is no 
validation required for online impersonation [1]. How do we know 
you are not impersonating this David Maynor character?

More importantly, and of equal relevance to this list (these 
lists?), how can we be sure you aren't n3td3v? Or GOBBLES? Or both?

J

[1] http://www.securityfocus.com/columnists/441

On Thu, 19 Jul 2007 09:36:49 -0400 David Maynor 
<dave@...atasec.com> wrote:
>http://erratasec.blogspot.com/2007/07/i-am-not-lmh.html
>
>-----Original Message-----
>From: full-disclosure-bounces@...ts.grok.org.uk [mailto:full-
>disclosure-bounces@...ts.grok.org.uk] On Behalf Of 
>andre@...rations.net
>Sent: Thursday, July 19, 2007 9:15 AM
>To: Lance M. Havok
>Cc: full-disclosure@...ts.grok.org.uk; 
>fuzzing@...testar.linuxbox.org; dailydave@...ts.immunitysec.com
>Subject: Re: [Full-disclosure] [fuzzing] The truth
>
>Dave / LMH / whatever,
>
>Give up.
>
>You really don't get it, do you?
>
>Rouland, Ptacek, hdm, myself - we're all out to get you.
>Infosecsellout is a collaborative effort to drive you insane.
>
>Aitel even wrote that script just to make you more paranoid.
>
>If anyone actually cares that you used two identities online I'll
>really be surprised.  So did my grandma.
>
>Is this some kind of story?  A confession?  A bug report?  Your 
>whole
>paragraph about SILC leads nowhere - it doesn't make any sense.
>
>Ptacek, hdm, myself, et al - we all know who Infosecsellout is.  
>Not
>because we wrote clever scripts that do user fingerprinting via
>behavorial statistical analysis.  Think of it more like hearing the
>voice of an old friend call you on the phone.  Someone you haven't
>heard from in awhile.  Easy to identify, correct?
>
>Wait, why am I asking you? - that's probably never going to happen 
>to you.
>
>dre
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/

- --
Click for free info on real estate schools and make $150K/ year
http://tagline.hushmail.com/fc/Ioyw6h4eCnIQ58QE5Xosh8kr94mzZOAPaFhGAZliJ13oEnyV3lCONS/


-----BEGIN PGP SIGNATURE-----
Version: 9.6.2 (Build 2014)

wsFVAwUBRp90xloolD8DCw9dAQiCxg/9Ex6NjvPWzTm3i2d6B2+mae+ZMqixgTNd
rP219DkR9zLVcpkKZ1+M/6+lZRDQvLH5uGsRlmQ4VzPXeMS5rvlB9t6fMMlLf1wL
BMjm9X2AwcVl1jm6bQzN9pAUoIxu5UtKIh/bIzDcYPOn7NCya39P43lYt5UA7iL7
LQ3CaYKapuucoDX5G7xIynoXcRMtIzZqHcZ5EBjaR04idad5rI4KWSXKzTLNioGt
NCfvcRIcHYJeSHHoKkqus/r33VWZ/rQCrI2YIdUp9sv92qLeti5G7Vrm/MYfB2v1
FZAuRYj0e1p47UwmVvfmAk9hqFgmxIx9w79v9FYkGja4bTUKMjPwb7BUwlQTtauf
+aPUU8T+woYnSHpfNNIeOdN+slnVWCVaguh4a5mliUtx75jbbh6Vf1omrRApsPUq
uAaYL6BwMGP8YqCBN8h8KR9tUj5p81ydAzecxBz5aAbA+yFZSCrTS+oNnn+uJwqE
h4Q7azTwaFDkKULNLx8l/4XAZzGLE20Ughq+wVQgIgwb1HfWMGtnEVtA0zUCTaGk
w0G/44DMhVdFlnTDn3v8zCAu++/JHYFrw0O+xsMBNQ1r7/GXfWw5GxvMnI9//CVG
5yepVIai9CTIkvRlZrCA7dfJJWLlZqFL9D96L9sNAw7/Q+bUfutgES1E9x/CrN6q
7vuZNO3ZLz0=
=3O5d
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/