full-disclosure - Re: Apple IOS security issue pre-advisory record

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4F6F2ADE.3060607@simons-rock.edu>
Date: Sun, 25 Mar 2012 10:25:34 -0400
From: Charlie Derr <cderr@...ons-rock.edu>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: Apple IOS security issue pre-advisory record

On 03/23/2012 07:26 PM, Michal Zalewski wrote:
>> I find it very unfortunate that 300 supposed security professionals clicked
>> on a hidden link like that without first checking what it was, or if not
>> simply ignoring it like I did!!!
>
> So how do you meaningfully "check what it is" without actually
> requesting the document?
>
> And what's the difference between that post and a hidden<img>  or
> <iframe>  included on a less obvious website?
>
> /mz

YMMV, but I always figured attempting to grab things with links or lynx from a command-line GNU/linux environment ought 
to be fairly safe, even for files that I'm pretty certain contain viral/trojan code (and to state the obvious, I don't 
execute anything that I download, I simply use tools to view).   And for the record, I didn't get a chance to do that in 
this case, as I missed the original post.

     best,
         ~c

>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/