full-disclosure - Re: Verizon Wireless DNS Tunneling

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 07 Oct 2011 10:53:09 -0400
From: Valdis.Kletnieks@...edu
To: Terrence <secretpackets@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Verizon Wireless DNS Tunneling

On Fri, 07 Oct 2011 10:47:13 EDT, Terrence said:

> To the guy saying that comcast  requires an executable to authenticate you.
> Ha. You should prolly wipe your install.

And that's true even if you actually trusted the Comcast binary.  If they were
able to get a binary to get run, probably others have as well.  It either got
automatically run by the browser without your intervention, or it *did* prompt
for execution and you (probably blindly) said "OK".  Either way, you're probably
pwned by something else that got run the exact same way the Comcast binary
did.

Thanks for nothing, Comcast.  At least we've finally gotten most banks to not
send out phishy-looking email.

Content of type "application/pgp-signature" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/