full-disclosure - Re: [NANOG] IOS rootkits

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 20 May 2008 19:08:25 -0400
From: "Dr. J Swift" <fdiscsplat@...il.com>
To: n3td3v <xploitable@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: [NANOG] IOS rootkits

On Tue, May 20, 2008 at 6:49 PM, n3td3v <xploitable@...il.com> wrote:
> How can you say the cyber world is unlikely to end when Cisco is the
> most widely used router on the internet today? Everyone uses Cisco,
> all the ISP's and everyone.
>
> Even if the in the know guys secure their routers, there is still a
> hell of a lot of people who won't and a rootkit for Cisco will damage
> the internet, e-commerce and government!!!

Mr. Wallace,

You seem to be crafting a highly skilled act of social engineering.
Its meaning and intent must have extensive global reach.  Why are you
"talking up" this vulnerability to the extent that you are?  I wonder
after reading this email of yours from two years past.

* From: xploitable at gmail.com (n3td3v)
* Subject: [Full-disclosure] Securityfocus fall for n3td3v agenda to
show up the security company
* Date: Fri Jul 28 16:16:15 2006
* The only worm ever to appear with XSS was a harmless Myspace worm, yet
* both companies are saying things are critical and that the internet is
* rife with wormable XSS flaws, just to advertise to any would-be
* attacker who didn't know, to make sure they know now.
*
* There wasn't originally a threat in reality, but you can be sure
* they've just created a threat by talking up the attack vector of XSS
* worms on social network sites.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/