full-disclosure - Re: Full-Disclosure Digest, Vol 54, Issue 24

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <C6ADD220.F1A6%robertjamesmb@gmail.com>
Date: Sun, 16 Aug 2009 15:11:28 +0100
From: Robert James <robertjamesmb@...il.com>
To: <full-disclosure@...ts.grok.org.uk>
Subject: Re: Full-Disclosure Digest, Vol 54, Issue 24

Seems funny to us using Macs and other *nix boxes. One of the first
successful users of this tactic was Robin Hood Software, creators of
Evidence Eliminator. One of their most simple tactics was to link a frame in
your browser to C:\My Documents back in the Win9x days, and say any website
can see everything on your system.

On 16/08/2009 12:00, "full-disclosure-request@...ts.grok.org.uk"
<full-disclosure-request@...ts.grok.org.uk> wrote:

> Message: 1
> Date: Fri, 14 Aug 2009 09:37:05 -0400
> From: Kerry Hatcher <khatcher@...epointsecurity.com>
> Subject: [Full-disclosure] Might want to add this to your blocked list
> To: "full-disclosure@...ts.grok.org.uk"
> <full-disclosure@...ts.grok.org.uk>
> Message-ID:
> <84E77F49774CF54BA08B23A21FB4E54E090A5FEEC5@...exchange.bluepointsecurity.loca
> l>
> 
> Content-Type: text/plain; charset="us-ascii"
> 
> I was browsing Fail Blog and got redirected to this site.... Shows a video
> that looks like windows explorer looking at "my computer" and getting scanned.
> You know the routine...
> 
> Surprised that none of our blockers snagged the url (Open-DNS, WOT, Chrome,
> Phish-Tank) thought I'd share here.
> 
> antivirus-online-scanv6(dot)com
> 
> thanks,
> Kerry Hatcher

-- 

This message may contain confidential information and is intended only for
the individual named. If you are not the named addressee you should not
disseminate, distribute or copy this e-mail. Please notify the sender
immediately by e-mail if you have received this e-mail by mistake and delete
this e-mail from your system.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/