full-disclosure - Re: MouseOverJacking attacks

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <72daeffd1001061111s74cbdfabx65c6625edbe927a6@mail.gmail.com>
Date: Wed, 6 Jan 2010 11:11:12 -0800
From: Chris Evans <scarybeasts@...il.com>
To: MustLive <mustlive@...security.com.ua>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: MouseOverJacking attacks

On Tue, Jan 5, 2010 at 9:49 AM, MustLive <mustlive@...security.com.ua> wrote:
> Hello Jeff!
>
> As I said in previous letter, Happy New Year. And thanks for your attention
> to my article.
>
>> Do you consider yourself as an oz XSS ninja ?
>
> Not XSS ninja. They can't compare to me ;-).
>
> I just seriously do my work, when I'm researching any class of vulnerability
> (both stated and unstated in WASC TC v.1/v.2). It concerns as to XSS, as to
> other classes of vulnerabilities.
>
>> Did your C.V. ended in the OWASP trash bin ?
>
> No.
>
>> And how the fuck you came up with a nickname like that ?
>
> I see you became too interested in my person and have too much free time.
>
> It's a long story (from December 1998 when I created my pseudonym). No need
> to speak about it in security mailing list.
>
>> Let us know, we truly give a shit about your life, and xss.
>
> As I see you very like to write not serious letters. So, Jeff, take into
> account, that I have already added your email to my blacklist.

This is a blow from which Jeff may never recover. Poor Jeff :(

> So for you
> there is no need to worry to write me any letters.
>
> If you don't want to read my posts to mailing list you can do one of the
> following: 1) Do not read my posts. 2) Add my email to your filters to not
> receive them. 3) Unsubscribe from Full-Disclosure mailing list.
>
> And my recommendation for you: use your time more wiser.
>
> Best wishes & regards,
> MustLive
> Administrator of Websecurity web site
> http://websecurity.com.ua
>
> ----- Original Message -----
> From: Jeff Williams
> To: MustLive
> Cc: full-disclosure@...ts.grok.org.uk
> Sent: Monday, January 04, 2010 5:29 AM
> Subject: Re: [Full-disclosure] MouseOverJacking attacks
>
>
> Thanks for your wishes MustDie;
>
> Do you consider yourself as an oz XSS ninja ?
>
> Did your C.V. ended in the OWASP trash bin ?
>
> And how the fuck you came up with a nickname like that ?
>
>
>
> Let us know, we truly give a shit about your life, and xss.
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/