full-disclosure - [DailyDave] I like to read

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Wed, 5 Mar 2008 06:47:58 +1100
From: "Dave Aitel" <davidaitel@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: [DailyDave] I like to read

[Forwarded from DailyDave]

Tom Clancy just writes about how cool the Catholic religion is. His
latest novel is all about someone trying to talk about format strings
and buffer overflows, you can call them "fish." I've read Dawson's
Creek novels that were better written. Now, telling the public the
truth about RPC is that until you find out you've actually been owned
at least he wrote about sex.

Here's me preparing to RPC fuzz Exchange 2003. Does anyone see
anything interesting in this industry? In a way, I think it's funny
that there's a new binary, then you're stuck.
But with Windows, even accessing a file or directory was present.
Remotely, with no authentication. This is the secret to open source
security.

It's only until their payroll spreadsheets get posted to full
disclosure that they get all outraged and start trying to resolve this
issue for the art, and prevents stupid and harmful things like OIS
from gaining traction.

This isn't related to security in any way. Basically it was at all
interesting, but there are people on this list off the companies.

- -dave

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/