full-disclosure - Re: Fuzzing for Fun and Profit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <20090211170148.A4B76158045@smtp.hushmail.com>
Date: Wed, 11 Feb 2009 12:01:48 -0500
From: el8@...hmail.com
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Fuzzing for Fun and Profit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dear tal0n.

when will you do something that hasn't been done and is even
relevant or practical in 2009? fuzzing sftp and command line
arguments/env variables... nice and 2000AD "oh but its setuid(0)"
yeah on your box and the 5 other people who download it to write
useless papers/exploits to feel like they are smart/doing something
(hi prdelka). When is the last time a sftpd exploit was useful?
-----BEGIN PGP SIGNATURE-----
Charset: UTF8
Version: Hush 3.0
Note: This signature can be verified at https://www.hushtools.com/verify

wpwEAQMCAAYFAkmTBHwACgkQhtejBzrM32l9fAP+L5pGZYr3uQVaRUNh0hrO91/EjR8j
Eh/OLWWnhvEneGDwra2YR70R4AV0YDx3/wey/McNmiICu16xRLopvapqVdV2VVS5/1eP
z6lqWg3Rs+vZQuSEjmblxvhPLgb9dLBRr60qbKPfGPEZKssv3akkxZOmm9no8P1KX8wP
JU2A26Q=
=Iy18
-----END PGP SIGNATURE-----

--
Too many bills?  Click here to simplify your life and lower your debt.
 http://tagline.hushmail.com/fc/PnY6qxtUbhP9WqQxe5tCHOKDJDbyevAbhO9MFNhCEbIMLazpKKNbq/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/