full-disclosure - Re: Microsot DID DISCLOSE potential Backdoor

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080508154144.GA89026@infiltrated.net>
Date: Thu, 8 May 2008 10:41:44 -0500
From: "J. Oquendo" <sil@...iltrated.net>
To: Paul Schmehl <pauls@...allas.edu>
Cc: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: Microsot DID DISCLOSE potential Backdoor

On Thu, 08 May 2008, Paul Schmehl wrote:

> You're comparing apples with oranges.  The is precisely the muddying of the
> waters that J. Oquendo is seeking to stir up emotions.

And you know me this well to infer it's stirring up emotions. I call it
raising awareness. You have your interpretation of what you read, I have
mine. Is yours wrong Paul. You state "waa waa waa I ran the tool it did
nothing therefore you are wrong J. Oquendo I'm Paul Schmehl!" Did you
run it on an infected machine Mr. Schmehl. No so please explain how you
yourself did not "muddy this water."

> It clearly says that on the download page.  It's not Microsoft's fault if
> you don't bother to read it.

It is Microsoft's fault for not being honest period no ifs ands or buts.
Please give us your professional correlation of the article. Information
obtained from MSRT was used to track botnet hunters in cahoots with another
tool.

> Yes, their web page (I don't see any EULA) states that they don't collect
> personally identifiable information.  Furthermore, the botnet tool is a
> separate tool.  The page also states that after the tool is run, it deletes
> itself.  So, when you are infected with something, the tool will detect and
> clean it *and* send some information about the infection back to M$.

Can you please find this page. I showed you mine show me yours or just STFU
for now, otherwise the "my cojones are bigger than yours" becomes redundant
nonsense. EOS

-- 
=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
J. Oquendo
SGFA #579 (FW+VPN v4.1)
SGFE #574 (FW+VPN v4.1)

wget -qO - www.infiltrated.net/sig|perl

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x3AC173DB

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/